CVE-2021-27253

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handli...

CVE-2021-27253

The CVE-2021-27253 issue affects NETGEAR Nighthawk R7800. The flaw is in the rc_service parameter handling passed to apply_bind.cgi, where insufficient validation allows a user-supplied string to be used in a system call, enabling code execution with root privileges. The vulnerability is exploita...