The vulnerability arises from insufficient authentication mechanisms and missing input validation in multiple NETGEAR routers and access points. An attacker who can reach the local network can send specially crafted requests that bypass authentication checks and execute arbitrary commands on the device. This grants the attacker the ability to read sensitive configuration data or alter device settings, carrying the risk of preventing proper network operations or enabling further lateral movement within the network.

Affected devices include the NETGEAR LBR1020, LBR20, R6700AX, R7800, R9000, RAX10 (both v1 and v2), RAX120 (all variants), RAX36S, RAX70, RAX78, RBR10, RBR20, RBR350, RBR40, RBR50, RBS10, RBS20, RBS350, RBS40, RBS50, XR450, and XR500. The vendor has published fixed firmware versions for each model, though some models are at end‑of‑support and will no longer receive updates.

The CVSS score of 5.6 indicates moderate severity, and at present no EPSS data is available, meaning the exploitation probability is unclear. The vulnerability is not listed in CISA’s KEV catalog, so known exploitation packages are not documented. Exploitation requires local network access and the ability to communicate with the device’s management interfaces. Because the attacker can run arbitrary commands, the impact is high if successful. Promptly applying official firmware updates mitigates the risk.