CVEvulnerability

CVE-2020-27861

8.8 HIGH Published 2021-02-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-02-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
8.3 HIGH — AV:A/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-78

Description

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UA_Parser utility. A crafted Host Name option in a DHCP request can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11076.

Affected configurations

• netgear cbk40 firmware (< 2.6.1.38) • netgear cbk43 firmware (< 2.6.1.38) • netgear cbr40 firmware (< 2.6.1.38) • netgear ex6200 firmware (< 1.0.1.82) • netgear ex7700 firmware (< 1.0.0.210) • netgear ex8000 firmware (< 1.0.1.224) • netgear rbk12 firmware (< 2.6.1.44) • netgear rbk13 firmware (< 2.6.1.44) • netgear rbk14 firmware (< 2.6.1.44) • netgear rbk15 firmware (< 2.6.1.44) • netgear rbr10 firmware (< 2.6.1.44) • netgear rbs10 firmware (< 2.6.1.44) • netgear rbk20w firmware (< 2.6.1.36) • netgear rbk23w firmware (< 2.6.1.36) • netgear rbk20 router firmware (< 2.6.1.36) • netgear rbk20 satellite firmware (< 2.6.1.38) • netgear rbk22 router firmware (< 2.6.1.36) • netgear rbk22 satellite firmware (< 2.6.1.38) • netgear rbk23 router firmware (< 2.6.1.36) • netgear rbk23 satellite firmware (< 2.6.1.38) • netgear rbr20 firmware (< 2.6.1.36) • netgear rbs20 firmware (< 2.6.1.38) • netgear rbk30 firmware (< 2.6.1.36) • netgear rbk33 firmware (< 2.6.1.36) • netgear rbk40 router firmware (< 2.6.1.36) • netgear rbk40 satellite firmware (< 2.6.1.38) • netgear rbk43 router firmware (< 2.6.1.36) • netgear rbk43 satellite firmware (< 2.6.1.38) • netgear rbk43s router firmware (< 2.6.1.36) • netgear rbk43s satellite firmware (< 2.6.1.38) • netgear rbk44 router firmware (< 2.6.1.36) • netgear rbk44 satellite firmware (< 2.6.1.38) • netgear rbr40 firmware (< 2.6.1.36) • netgear rbs40 firmware (< 2.6.1.38) • netgear rbk50 firmware (< 2.6.1.40) • netgear rbk50v firmware (< 2.6.1.40) • netgear rbk52w firmware (< 2.6.1.40) • netgear rbr50 firmware (< 2.6.1.40) • netgear rbs50 firmware (< 2.6.1.40)

Related

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References