Insufficient input validation in the time server (NTP) configuration allows an attacker on the local network who possesses valid administrator credentials to execute arbitrary commands on the router. This flaw compromises the integrity of the device, enabling an attacker to alter settings, install software, or otherwise take control. The vulnerability does not affect confidentiality or availability directly, but compromise of the router’s controls is significant from a security standpoint.

The affected models are NETGEAR CBR40 (now End‑of‑Support), NETGEAR R7000, NETGEAR R7000P, and NETGEAR RAX40, all of which are in the End‑of‑Support phase. Devices that already have automatic updates enabled may have received the fix; otherwise they require a manual firmware upgrade to the latest released versions: v1.0.11.130 for the R7000, v1.3.3.152 for the R7000P, and v1.0.3.64 for the RAX40.

The CVSS score of 4.3 represents a moderate severity. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited public exploitation evidence. Nevertheless, the attack vector requires local network presence and valid administrative credentials, making it a plausible threat for internal adversaries. Once the attacker successfully exploits the flaw, they can achieve unauthorized command execution, leading to full control over the affected router.