Arbitrary Code Execution Vulnerability in NETGEAR Routers

CVE-2022-27647

Summary

This vulnerability affects NETGEAR R6700v3 routers and enables network-adjacent attackers to execute arbitrary code. While authentication is generally required, an inherent flaw allows this mechanism to be bypassed. The vulnerability originates from improper validation of user input concerning name or email fields utilized by the libreadycloud.so component. When exploited, this could allow attackers to execute commands at the root level, potentially compromising the entire router.

References