NETGEAR R6260 and R6850 Improper Input Validation Vulnerability Allowing Command Execution

A vulnerability allowing command execution has been identified in the NETGEAR R6260 and R6850 routers, both through version 1.1.0.86. This issue arises from improper input validation, which enables unauthenticated attackers on the local area network to conduct man-in-the-middle attacks and manipulate the device's DNS settings, ultimately leading to unauthorized command execution.

Impact

Exploitation of this vulnerability allows for unauthorized command execution on the affected router.

Remediation

Users are advised to update to the latest firmware version 1.1.0.88 for both the R6260 and R6850 models. Instructions for downloading the firmware are available on the NETGEAR Download Center.