CVE-2021-27257

This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files v...

CVE-2021-27257

The CVE-2021-27257 issue affects NETGEAR R7800 firmware 1.0.2.76. It stems from the FTP file-download path where the server certificate is not properly validated, allowing network-adjacent attackers to potentially execute arbitrary code with root privileges after exploitation. The vulnerability i...