The vulnerability in the bsw_fix.cgi script of Netgear R8500 router software allows a hacker to execute arbitrary commands.

The vulnerability of the bswfix.cgi script of the Netgear R8500 router software relates to the failure to eliminate special elements used in the operating system’s commands when processing the wangateway parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary comman...