NETGEAR Orbi Routers Insufficient Input Validation Vulnerability Allowing OS Command Injection

A vulnerability exists in NETGEAR Orbi routers due to inadequate input validation, enabling attackers on the local network to perform OS command injections. This issue is present in several Orbi models, including the RBE970, RBE971, RBE770, RBE771, RBE772, RBE773, RBR750, RBR840, RBR850, RBR860, RBS750, RBS840, RBS850, RBS860, RBRE950, RBRE960, RBSE950, and RBSE960.

Impact

Exploitation of this vulnerability allows for OS command injection, where an attacker can execute arbitrary commands on the router's operating system.

Remediation

Users are advised to update their routers to the latest firmware version. Specific update instructions can be found on the NETGEAR support website for each affected product.