FTP File Download Flaw in NETGEAR R7800 Firmware

CVE-2021-27257

Summary

The vulnerability allows network-adjacent attackers to compromise the integrity of files downloaded via FTP on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Due to inadequate validation of the certificate presented by the FTP server, an attacker can exploit this weakness without requiring authentication. This flaw can be leveraged alongside other vulnerabilities to execute arbitrary code at the root level, thereby posing significant security risks to the device and its network.

References