Arbitrary Code Execution Vulnerability in NETGEAR R6700 Routers

CVE-2020-15634

What is CVE-2020-15634?

This vulnerability exists in the NETGEAR R6700 router, where network-adjacent attackers can execute arbitrary code due to improper validation of user-supplied input during string table file uploads. No authentication is required to exploit this flaw, making it particularly concerning for users with vulnerable firmware versions. An attacker exploiting this weakness can execute malicious commands in the context of the web server, potentially compromising the device and its network security.

References