CVE-2021-45567

Vulnerability

A post-authentication command injection vulnerability exists in certain NETGEAR WiFi system models: RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, running firmware versions prior to 3.2.16.6. An authenticated user can inject arbitrary commands into the system through a vulnerable input field, likely via the web-based administration interface [1].

Exploitation

The attacker must first authenticate to the device with valid administrative credentials. Once authenticated, the attacker can send a crafted HTTP request containing malicious command syntax to a vulnerable endpoint. No additional user interaction or network position beyond LAN access is required [1].

Impact

Successful exploitation allows the authenticated attacker to execute arbitrary system commands on the device with root or administrative privileges. This can lead to full compromise of the device, including disclosure of sensitive configuration data, modification of settings, and denial of service [1].

Mitigation

NETGEAR released firmware version 3.2.16.6 to fix this vulnerability for all affected models. Users should update immediately via the NETGEAR Support page. No workaround is available; the only mitigation is applying the firmware update [1].