Command Injection Vulnerability in NETGEAR Networking Devices

CVE-2021-45597

Summary

Certain NETGEAR WiFi devices are exposed to a command injection vulnerability that can be exploited by an authenticated user. This security flaw allows an attacker to execute arbitrary commands on the affected devices, potentially compromising the integrity of the network. Models including the CBR40, CBR750, RBR850, and RBS850 are particularly affected, each requiring updates to their firmware to mitigate the risk. Users are urged to follow the vendor's security advisory to safeguard their devices.

References