NETGEAR Products Telnet Service Activation Vulnerability

A vulnerability exists in some end-of-service NETGEAR products, including the NETGEAR PR2000, allowing the Telnet service to be activated remotely via a magic packet sent to the device's LAN interface. This 'TelnetEnable' functionality is undocumented and not available in currently supported NETGEAR products.

Impact

Exploitation of this vulnerability could lead to unauthorized activation of the Telnet service, potentially allowing for remote access and command execution on the affected device.

Remediation

NETGEAR advises replacing end-of-service products with newer models that offer advanced features and built-in security protections. The NETGEAR PR2000 is among the products that should be replaced.