A flaw in input validation on certain NETGEAR routers enables authenticated administrators on the local network to modify the router’s configuration, potentially changing routing tables, DNS settings, or other device settings without detection. The vulnerability does not grant higher privileges or remote code execution; it strictly permits tampering with device integrity when legitimate admin credentials are available.

Affected routers include the NETGEAR MR60, MR70, MR80, MS60, MS70, MS80, R6400v2, R6700v3, R6900P, R7000, R7000P, R7960P, R8000P, R8500, RAX20, RAX35v2, RAX40v2, RAX41, RAX42, RAX43, RAX45, RAX48, RAX50, RAX50S, RAXE450, RAXE500, and XR1000. For each model, NETGEAR specifies firmware versions that fix the issue, such as MR60 V1.1.7.132 and R6400v2 V1.0.4.128; several RAX series units have reached end‑of‑support with no future updates planned.

The CVSS score of 4.3 classifies the vulnerability as low severity, and the EPSS score is unavailable, indicating no widespread exploitation evidence. The attack vector is limited to local‑network access where an attacker holds administrative credentials. Once those credentials are compromised, an attacker could alter configuration settings, potentially disrupting network operations, but the lack of remote execution or privilege escalation constrains the overall risk.