Authentication Bypass Vulnerability in NETGEAR R7000 Routers

CVE-2021-34977

Summary

This vulnerability permits attackers with network access to bypass authentication measures on NETGEAR R7000 routers. It arises from inadequate authentication checks during the handling of SOAP requests. Consequently, without proper authorization, an attacker can exploit this weakness to reset the administrator's password, thereby gaining unauthorized access to the router's settings and potentially compromising the entire network.

References