This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within readycloud_control.cgi. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-15762.
| Software | From | Fixed in |
|---|---|---|
| netgear / r6700_firmware | - | 1.0.4.126 |
| netgear / r7000_firmware | - | 1.0.11.134 |
| netgear / r8000_firmware | - | 1.0.4.84 |
| netgear / r6400_firmware | - | 1.0.4.126 |
| netgear / r8500_firmware | - | 1.0.2.158 |
| netgear / r7900p_firmware | - | 1.4.3.88 |
| netgear / r8000p_firmware | - | 1.4.3.88 |
| netgear / rax40_firmware | - | 1.0.10.110 |
| netgear / r7850_firmware | - | 1.0.5.84 |
| netgear / rax20_firmware | - | 1.0.10.110 |
| netgear / r7960p_firmware | - | 1.4.3.88 |
| netgear / rax15_firmware | - | 1.0.10.110 |
| netgear / rax200_firmware | - | 1.0.6.138 |
| netgear / rax45_firmware | - | 1.0.10.110 |
| netgear / rax50_firmware | - | 1.0.10.110 |
| netgear / rax75_firmware | - | 1.0.6.138 |
| netgear / rax35_firmware | - | 1.0.10.110 |
| netgear / rax43_firmware | - | 1.0.10.110 |
| netgear / rax42_firmware | - | 1.0.10.110 |
| netgear / rax48_firmware | - | 1.0.10.110 |
| netgear / rax50s_firmware | - | 1.0.10.110 |
| netgear / rax38_firmware | - | 1.0.10.110 |
| netgear / lax20_firmware | - | 1.1.6.34 |