Command Injection Vulnerability in NETGEAR WiFi Systems

CVE-2021-45565

Summary

Certain NETGEAR WiFi systems are vulnerable to command injection attacks when accessed by an authenticated user. Devices such as the RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, all prior to firmware version 3.2.16.6, can be compromised if the authentication is bypassed, allowing attackers to execute arbitrary commands. This vulnerability raises significant security concerns, potentially leading to unauthorized access and control over affected networks.

References