ZDI-21-248: (Pwn2Own) NETGEAR R7800 udchpd DHCP_REQUEST Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the vendorspecific DHCP opcode. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-21-248?
The severity of ZDI-21-248 is critical due to its potential for arbitrary code execution by network-adjacent attackers.
How do I fix ZDI-21-248?
To remediate ZDI-21-248, update the firmware of your NETGEAR R7800 to the latest version provided by NETGEAR.
Who is affected by ZDI-21-248?
ZDI-21-248 affects installations of the NETGEAR R7800 router.
Is authentication required to exploit ZDI-21-248?
No, authentication is not required to exploit the ZDI-21-248 vulnerability.
What type of attack is associated with ZDI-21-248?
ZDI-21-248 allows network-adjacent attackers to execute arbitrary code on the affected device.