ZDI-21-249: (Pwn2Own) NETGEAR Nighthawk R7800 Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the rcservice parameter provided to applybind.cgi. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-21-249?
ZDI-21-249 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix ZDI-21-249?
To fix ZDI-21-249, update the firmware of your NETGEAR Nighthawk R7800 to the latest version released by NETGEAR.
Who is affected by ZDI-21-249?
The vulnerability ZDI-21-249 affects installations of the NETGEAR Nighthawk R7800 router.
Can ZDI-21-249 be exploited without authentication?
No, ZDI-21-249 requires authentication, but the existing authentication mechanism can be bypassed.
What type of attack is associated with ZDI-21-249?
ZDI-21-249 allows network-adjacent attackers to execute arbitrary code on affected devices.