Code Execution Vulnerability in NETGEAR Nighthawk Router

CVE-2021-27251

Summary

This vulnerability allows attackers within the network to execute arbitrary code on NETGEAR Nighthawk R7800 devices. The flaw arises from insecure handling of firmware updates, which rely on a fallback to an insecure protocol for delivery. As a result, an attacker can exploit this weakness without needing authentication, allowing code execution with root privileges. This type of vulnerability poses significant risks, as it can lead to unauthorized access and control over affected devices.

References