Netgear JWNR2000v2 Command Injection Vulnerability in Wireless Management Function

A command injection vulnerability has been identified in the Netgear JWNR2000v2 router, specifically in version 1.0.0.11. The issue arises in the 'cmd_wireless' function, where the 'host' argument is manipulated, allowing attackers to execute arbitrary commands on the device. This vulnerability can be exploited remotely, without authentication.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Reproduction

To reproduce this vulnerability, send a request to the 'cmd_wireless' function with a crafted 'host' argument that includes the desired command. The router will execute the command on the system, leading to command injection.