Authenticated command executioin in several NETGEAR routers
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | N/A |
| CWE-ID | CWE-78 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
RBK852 Hardware solutions / Routers & switches, VoIP, GSM, etc RBR850 Hardware solutions / Routers & switches, VoIP, GSM, etc RBS850 Hardware solutions / Routers & switches, VoIP, GSM, etc RBK752 Hardware solutions / Routers & switches, VoIP, GSM, etc RBR750 Hardware solutions / Routers & switches, VoIP, GSM, etc RBS750 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX200 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX75 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX80 Hardware solutions / Routers & switches, VoIP, GSM, etc MK83 Hardware solutions / Routers & switches, VoIP, GSM, etc MR80 Hardware solutions / Routers & switches, VoIP, GSM, etc MS80 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX45 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX50 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX43 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX40v2 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX35v2 Hardware solutions / Routers & switches, VoIP, GSM, etc LAX20 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX15 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX20 Hardware solutions / Routers & switches, VoIP, GSM, etc MK62 Hardware solutions / Routers & switches, VoIP, GSM, etc MR60 Hardware solutions / Routers & switches, VoIP, GSM, etc MS60 Hardware solutions / Routers & switches, VoIP, GSM, etc CBR750 Hardware solutions / Routers & switches, VoIP, GSM, etc CBR40 Hardware solutions / Routers & switches, VoIP, GSM, etc R8000P Hardware solutions / Routers & switches, VoIP, GSM, etc R7960P Hardware solutions / Routers & switches, VoIP, GSM, etc R7000P Hardware solutions / Routers for home users XR1000 Hardware solutions / Routers for home users RS400 Hardware solutions / Routers for home users |
| Vendor | NETGEAR |
Security Bulletin
This security bulletin contains one low risk vulnerability.
1) OS Command Injection
EUVDB-ID: #VU70577
Risk: Low
CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: N/A
CWE-ID:
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Exploit availability: No
DescriptionThe vulnerability allows a remote user to execute arbitrary shell commands on the device.
The vulnerability exists due to improper input validation. A remote authenticated user can send specially crafted data to the application and execute arbitrary OS commands on the device.
Install updates from vendor's website.
Vulnerable software versionsRBK852: before 3.2.17.12
RBR850: before 3.2.17.12
RBS850: before 3.2.17.12
RBK752: before 3.2.17.12
RBR750: before 3.2.17.12
RBS750: before 3.2.17.12
RAX200: before 1.0.4.120
RAX75: before 1.0.4.120
RAX80: before 1.0.4.120
MK83: before 1.1.3.6
MR80: before 1.1.3.6
MS80: before 1.1.3.6
RAX45: before 1.0.3.96
RAX50: before 1.0.3.96
RAX43: before 1.0.3.96
RAX40v2: before 1.0.3.96
RAX35v2: before 1.0.3.96
R7000P: before 1.3.3.140
LAX20: before 1.1.6.28
RAX15: before 1.0.3.96
RAX20: before 1.0.3.96
XR1000: before 1.0.0.58
MK62: before 1.0.6.116
MR60: before 1.0.6.116
MS60: before 1.0.6.116
CBR750: before 4.6.3.6
CBR40: before 2.5.0.24
RS400: before 1.5.1.80
R8000P: before 1.4.2.84
R7960P: before 1.4.2.84
CPE2.3- cpe:2.3:h:netgear:rbk852:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbr850:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbs850:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbk752:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbr750:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbs750:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax200:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax75:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax80:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:mk83:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:mr80:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:ms80:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax45:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax50:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax43:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax40v2:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax35v2:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:r7000p:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:lax20:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax15:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax20:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:xr1000:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:mk62:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:mr60:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:ms60:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:cbr750:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:cbr40:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rs400:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:r8000p:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:r7960p:*:*:*:*:*:*:*:*
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
