The vulnerability is caused by inadequate authentication and a lack of input validation in a range of NETGEAR routers and access points. Because devices fail to verify the identity of users accessing their management interfaces, an attacker who is already on the local network can send crafted requests that bypass authentication. The flaw allows the attacker to run commands that affect the router’s confidentiality or alter its configuration settings. These changes can expose sensitive configuration data or modify network behavior, potentially facilitating further compromise or disruption.

Affected devices include the NETGEAR LBR1020, LBR20, R6700AX, R7800, R9000, RAX10 (both v1 and v2), RAX120 (all variants), RAX36S, RAX70, RAX78, RBR10, RBR20, RBR350, RBR40, RBR50, RBS10, RBS20, RBS350, RBS40, RBS50, XR450, and XR500. The vendor has published fixed firmware versions for each model, though some models are at end‑of‑support and will no longer receive updates.

The CVSS score of 5.6 indicates moderate severity, and the EPSS score of 0.00138 indicates a very low exploitation probability. The vulnerability is not listed in CISA’s KEV catalog, so known exploitation packages are not documented. Exploitation requires local network access and the ability to communicate with the device’s management interfaces. Because the attacker can run commands that impact confidentiality or change configuration, the potential impact is high if successful. Promptly applying official firmware updates mitigates the risk.