Executive Summary

This vulnerability is an insufficient input validation flaw in NETGEAR Orbi routers that allows attackers connected to the router's local area network (LAN) to execute operating system (OS) command injections. [4]

Useful 0 Not Useful 0

Impact Analysis

An attacker on the same LAN as the affected NETGEAR Orbi router could exploit this vulnerability to execute arbitrary OS commands on the router, potentially compromising the device's security and functionality. However, the severity is rated as LOW. [4]

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, ensure that your NETGEAR Orbi router is running the latest firmware version. If automatic updates are not enabled, manually verify your firmware version and update to the fixed versions or later as listed: RBE971 firmware version 9.10.0.2 or later, RBE970 firmware version 9.10.0.2 or later, RBR750 firmware version 7.2.8.5 or later, RBR850 firmware version 7.2.8.5 or later, RBR860 firmware version 7.2.8.5 or later, RBS750 firmware version 7.2.8.5 or later, RBS850 firmware version 7.2.8.5 or later, RBS860 firmware version 7.2.8.5 or later, RBRE960 firmware version 7.2.7.15 or later, and RBSE960 firmware version 7.2.7.15 or later. Applying these updates promptly will prevent exploitation of the OS command injection vulnerability. [4]

Useful 0 Not Useful 0