Insufficient Input Validation in NETGEAR R7300 Router's PPPoE Setup
CVE-2026-107917
4.3MEDIUM
What is CVE-2026-107917?
The NETGEAR R7300 router has a vulnerability in its PPPoE Setup feature, where insufficient input validation allows authenticated administrators on the local network to execute unauthorized actions. This flaw was identified through extensive testing in a controlled research environment, indicating potential risks to the integrity of the router's operations if exploited. While the testing did not confirm the issue on actual production devices, the implications underscore the need for vigilance in router security practices.
Affected Version(s)
R7300DST 0
References
CVSS V4
Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Security Research Center (SRC) @ Concordia University