CVE-2021-45575

Vulnerability

A post-authentication command injection vulnerability exists in the web interface of certain NETGEAR WiFi system models. Affected devices include RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 running firmware versions prior to 3.2.16.6. The vulnerability allows an authenticated user to inject arbitrary operating system commands through crafted HTTP requests [1].

Exploitation

An attacker must have valid administrative credentials to the device's web interface. With authenticated access, the attacker can send specially crafted input to vulnerable endpoints, resulting in command injection. No additional user interaction is required beyond the initial authentication [1].

Impact

Successful exploitation enables the attacker to execute arbitrary commands with root privileges on the affected device. This can lead to full compromise of the WiFi system, including unauthorized access to network traffic, configuration changes, and potential lateral movement within the network [1].

Mitigation

NETGEAR has released firmware version 3.2.16.6 to address this vulnerability. Users are strongly advised to update their devices to the latest firmware as soon as possible. No workarounds are available; updating is the only recommended mitigation [1].