CVE-2021-41449

Vulnerability

A path traversal vulnerability exists in the web interface of Netgear RAX35, RAX38, and RAX40 routers prior to firmware version 1.0.4.102 [2]. An unauthenticated remote attacker can exploit this by sending a specially crafted HTTP packet to traverse directory paths and access restricted files within the web application [2].

Exploitation

The attacker needs network access to the router's web interface, typically over the local network or potentially from the internet if the interface is exposed. No authentication is required. The attacker crafts an HTTP request with path traversal sequences (e.g., ../) to read files outside the web root [2].

Impact

Successful exploitation allows the attacker to read sensitive files stored on the router, such as configuration files, credentials, or other restricted data, leading to information disclosure [2]. The CVSS score is 6.9 (Medium), with high confidentiality impact [2].

Mitigation

Netgear has released firmware version 1.0.4.102 to fix this vulnerability [2]. Users should download and install the latest firmware from Netgear's support page [2]. No workarounds are provided; updating is the only mitigation.