NETGEAR Orbi WiFi 6 and 6E Routers and Satellites Insufficient Input Validation Vulnerability Allowing Unauthorized Software Modifications

A vulnerability exists in various NETGEAR Orbi WiFi 6 and 6E models, including routers and satellites, due to inadequate input validation. This issue enables authenticated administrators on the local network to make unauthorized changes to the router's software and functionality.

Impact

Exploitation of this vulnerability could lead to unauthorized modifications of the router's software and features.

Remediation

Users can update to the latest firmware version 7.2.8.5, available through the NETGEAR Download Center or via the Orbi mobile app, to address this vulnerability.