Authentication Bypass Vulnerability in NETGEAR R7800 Router

CVE-2021-27254

What is CVE-2021-27254?

This vulnerability allows network-adjacent attackers to bypass authentication on installations of the NETGEAR R7800 router. The flaw resides in the apply_save.cgi endpoint, which uses a hard-coded encryption key. By exploiting this vulnerability, attackers can execute arbitrary code with root privileges, leading to potential unauthorized access and control over the device. Users are highly recommended to apply available patches and updates to mitigate any associated risks.

References