Command Injection Vulnerability in NETGEAR WiFi Systems

CVE-2021-45571

Summary

Several NETGEAR WiFi systems are vulnerable to a command injection issue that can be exploited by authenticated users. This vulnerability allows attackers to execute arbitrary commands on the affected devices, compromising their security and potentially leading to unauthorized access to sensitive information. The issue exists in multiple models, including RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, all prior to version 3.2.16.6. Users are advised to promptly update their firmware to mitigate this risk.

References