This vulnerability is a weakness in input handling within the web interface of the NETGEAR JR6150 router. An administrator who is already authenticated via the local network can submit malformed data that bypasses validation checks, allowing changes to router firmware settings or device behavior. The flaw is classified as CWE-20, which reflects insufficient input validation leading to improper access control. No evidence exists that the issue has been confirmed on physical hardware; it was identified through firmware emulation in a controlled environment.

Affected devices are NETGEAR JR6150 routers (AC750 WiFi Router 802.11ac Dual Band Gigabit) released in 2014. The product reached End‑of‑Support status in 2018 and no further security updates are scheduled by the vendor.

The CVSS score of 4.3 indicates moderate severity, and the EPSS score is not available, which suggests limited public knowledge of exploitation. The vulnerability is exploitable only by users who have administrator access to the local network and are able to log into the router’s web UI. No proof‑of‑concept or commercial exploitation reports exist, and the flaw has not been verified on production hardware. Therefore, while the potential impact includes unauthorized configuration changes that could degrade network security, the overall risk to systems outside the local network remains low, but the lack of official patches makes remediation necessary.