CVE-2021-45659

Vulnerability

The vulnerability is a server-side injection issue affecting the following NETGEAR Orbi WiFi system models: RBK40, RBR40, RBS40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50 all running firmware versions prior to 2.5.1.16, and RBS50Y running firmware versions prior to 2.6.1.40. The flaw exists in the router firmware and can be triggered by an attacker who is able to send crafted input to the device's management interface or web server, leading to injection on the server side [1].

Exploitation

To exploit the vulnerability, an attacker must have network access to the affected device, typically through the local network or possibly remotely if the management interface is exposed. By crafting a specific HTTP request or other input that reaches the vulnerable server-side component, the attacker can inject commands or parameters that are processed by the device's firmware [1]. The exact attack vector is not fully detailed in the advisory, but the vulnerability is classified as a server-side injection, indicating that the attacker can supply malicious data to a server-side function.

Impact

Successful exploitation allows an attacker to perform server-side injection, which can lead to arbitrary command execution on the device with the privileges of the affected service. This could enable the attacker to gain full control of the router, potentially read or modify network traffic, exfiltrate data, or pivot to other devices on the network. The impact is high, as it compromises the confidentiality, integrity, and availability of the affected system [1].

Mitigation

NETGEAR has released firmware updates to fix this vulnerability: version 2.5.1.16 for most models (RBK40, RBR40, RBS40, RBK20, RBR20, RBS20, RBK50, RBR50, RBS50) and version 2.6.1.40 for the RBS50Y. Users are strongly advised to download and install the latest firmware from NETGEAR Support as soon as possible. No workarounds are provided, but disabling remote administration and ensuring the device is not accessible from the internet can reduce exposure until the update is applied [1].