CVE-2021-45538

Vulnerability

A post-authentication command injection vulnerability exists in several NETGEAR devices. Affected models include RAX75 and RAX80 running firmware versions prior to 1.0.3.106, and RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 running firmware versions prior to 3.2.16.6 [1]. The vulnerability allows an authenticated user to inject arbitrary commands into the system.

Exploitation

To exploit this vulnerability, an attacker must have valid authentication credentials for the affected device. The attacker can then send specially crafted input that triggers command injection, leading to execution of arbitrary commands [1]. No user interaction beyond authentication is required.

Impact

Successful exploitation allows an authenticated attacker to execute arbitrary commands with elevated privileges, potentially leading to full compromise of the device, including disclosure of sensitive information, modification of configuration, or denial of service [1].

Mitigation

NETGEAR has released firmware updates to address this vulnerability. Users should upgrade to firmware version 1.0.3.106 for RAX75 and RAX80, and version 3.2.16.6 for the other affected models [1]. No workarounds are available; updating firmware is the recommended mitigation.