CVE-2021-41383

Description

setup.cgi on NETGEAR R6020 1.0.0.48 devices allows an admin to execute arbitrary shell commands via shell metacharacters in the ntp_server field.

Affected Platforms

Weakness Type

CWE-77

References

• https://j-o-e-l-s.github.io/2021/09/15/Hacking-The-Netgear-R6020.html
• https://j-o-e-l-s.github.io/2021/09/15/Hacking-The-Netgear-R6020.html