The vulnerability described as insufficient input validation allows an authenticated administrator who is connected to the local network to modify the router’s configuration, thereby compromising the device’s integrity; no remote code execution or privilege escalation is provided and exploitation requires valid administrative credentials.

Affected routers include the NETGEAR MR60, MR70, MR80, MS60, MS70, MS80, R6400v2, R6700v3, R6900P, R7000, R7000P, R7960P, R8000P, R8500, RAX20, RAX35v2, RAX40v2, RAX41, RAX42, RAX43, RAX45, RAX48, RAX50, RAX50S, RAXE450, RAXE500, and XR1000; some models are at end‑of‑support and will not receive updates.

The CVSS score of 4.3 indicates low severity, and the EPSS score below 1% indicates a very low probability of exploitation. The flaw is limited to the local network and requires an authenticated administrator, so overall risk is constrained. It is not listed in the CISA KEV catalog.