Command Injection Vulnerability in NETGEAR Routers and WiFi Systems

CVE-2021-38518

Summary

Certain NETGEAR routers and WiFi systems are susceptible to command injection attacks initiated by an authenticated user. This vulnerability allows attackers to execute arbitrary commands on the affected devices, potentially compromising their integrity and security. Specifically, the issue impacts the RAX200, RAX75, RAX80, RBK852, RBR850, and RBS850 models, under specified versions. Users are encouraged to update their devices to the latest firmware to mitigate this risk. More details can be found in NETGEAR's security advisory.

References