An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.
| Software | From | Fixed in |
|---|---|---|
| netgear / rbe971_firmware | - | 9.10.0.2 |
| netgear / rbe970_firmware | - | 9.10.0.2 |
| netgear / rbr750_firmware | - | 7.2.8.5 |
| netgear / rbr850_firmware | - | 7.2.8.5 |
| netgear / rbr860_firmware | - | 7.2.8.5 |
| netgear / rbs750_firmware | - | 7.2.8.5 |
| netgear / rbs850_firmware | - | 7.2.8.5 |
| netgear / rbs860_firmware | - | 7.2.8.5 |
| netgear / rbre960_firmware | - | 7.2.8.5 |
| netgear / rbse960_firmware | - | 7.2.8.5 |