Netgear JWNR2000v2 Command Injection Vulnerability in sub_435E04 Function

A command injection vulnerability has been identified in the Netgear JWNR2000v2 router, specifically in version 1.0.0.11. The issue arises in the sub_435E04 function, where the 'host' argument is manipulated, allowing for arbitrary command execution. This vulnerability can be exploited remotely, as the router does not properly sanitize input before executing system commands.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Reproduction

To reproduce this vulnerability, send a request to the router's sub_435E04 function with a crafted 'host' argument. The input is not properly validated, leading to command injection.