Remote Code Execution Vulnerability in NETGEAR CAX30S Routers

CVE-2022-43654

Summary

A command injection vulnerability exists within the NETGEAR CAX30S router, specifically concerning the handling of the token parameter in the sso.php endpoint. This vulnerability arises from insufficient validation of user-supplied input, allowing attackers with network access to execute arbitrary code as the root user. Exploiting this flaw does not require any form of authentication, making affected routers an accessible target for potential threats. Users of the NETGEAR CAX30S should ensure their devices are updated to mitigate risks associated with this vulnerability.

References