Netgear R7000 and EAX80 Denial-of-Service Vulnerability via Misconfigured USERLIMIT_GLOBAL Option

A denial-of-service vulnerability has been identified in the Netgear R7000 router and EAX80 extender, specifically in the firmware versions V1.3.1.64_10.1.36 and V1.0.1.70_1.0.2. The issue arises because the USERLIMIT_GLOBAL option in the bftpd.conf configuration file is set to 0, allowing unlimited users to connect. This misconfiguration can lead to denial-of-service attacks, as the server may become overwhelmed with connections, even though clients are disconnected after a short period.

Impact

Exploitation of this vulnerability can lead to denial-of-service conditions, where the device becomes overwhelmed with connections, potentially causing legitimate users to be disconnected or unable to connect.