Command Injection Vulnerability in NETGEAR WiFi Systems

CVE-2021-29077

Summary

Certain NETGEAR WiFi systems are susceptible to a command injection vulnerability that allows unauthenticated attackers to execute arbitrary commands on the affected devices. This flaw affects multiple models, including RBW30, RBS40V, and several iterations of the RBK series, all before specific firmware versions. If exploited, this vulnerability poses a significant risk, enabling potential attackers to gain unauthorized control over the devices, leading to network breaches and compromised user data.

References