NETGEAR Router Arbitrary Command Execution

The vulnerability of the apmode.cgi script in NETGEAR’s router microprogramming devices such as R8500, XR300, R7000P, and R6400 v2 lies in the lack of measures to neutralize special elements used in the operating system’s commands when processing the apmodegateway parameter. Exploiting this...