PT-2020-16822 · NetGear · Netgear R6220+13
1Sd3D
·
Published
2020-12-21
·
Updated
2021-03-26
·
CVE-2020-27867
CVSS v2.0
7.7
High
| Vector | AV:A/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 firmware version 1.2.0.62 1.0.1
Description
This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR routers. Although authentication is required to exploit this issue, the existing authentication mechanism can be bypassed. The specific flaw exists within the mini httpd service, which listens on TCP port 80 by default. When parsing the
funjsq access token parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this issue to execute code in the context of root.Recommendations
For NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 firmware version 1.2.0.62 1.0.1, consider disabling the mini httpd service until a patch is available. As a temporary workaround, restrict access to the
funjsq access token parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.Fix
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Netgear Jnr3210
Netgear R6020
Netgear R6080
Netgear R6120
Netgear R6220
Netgear R6260
Netgear R6700V2
Netgear R6800
Netgear R6900V2
Netgear R7450
Netgear Wnr2020
Nighthawk Ac2100
Nighthawk Ac2400
Mini Httpd