CVE-2018-21126

Vulnerability

A pre-authentication command injection vulnerability exists in NETGEAR WAC505 and WAC510 wireless access points running firmware versions prior to 5.0.0.17 [1]. The vulnerability allows an unauthenticated attacker to inject arbitrary operating system commands through a specially crafted request to the device's management interface.

Exploitation

An attacker with network adjacency to the vulnerable access point can exploit this vulnerability without any authentication [1]. The attacker sends a crafted request containing injected commands to the device's management interface, which is then executed by the underlying system. No user interaction is required.

Impact

Successful exploitation allows an unauthenticated attacker to execute arbitrary commands on the device with full system privileges [1]. The CVSS v3 vector (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates a high impact on confidentiality, integrity, and availability, resulting in complete compromise of the affected access point.

Mitigation

NETGEAR has released firmware version 5.0.0.17 for both WAC505 and WAC510 to address this vulnerability [1]. Users are strongly advised to update to the latest firmware as soon as possible. No workarounds are available for this issue.