Command Injection Vulnerability in NETGEAR Routers

CVE-2021-45554

Summary

Certain NETGEAR router models are susceptible to command injection vulnerabilities that can be exploited by authenticated users. This flaw allows a malicious actor to execute arbitrary commands on the affected devices, potentially compromising the integrity and security of the network. Devices such as the R6400, R6700v3, R7000, R6900P, R7000P, and R8000 are impacted, with various firmware versions vulnerable. Users are advised to update their router firmware immediately to mitigate risks associated with unauthorized access and control.

References