Threat Investigation
Request a demo

CVE-2020-27867

Medium

Description

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the mini_httpd service, which listens on TCP port 80 by default. When parsing the funjsq_access_token parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11653.

SeverityMedium
CVSS6.8
Exploit probability—
ProductNetgear Ac2100 Firmware
PublishedFeb 12, 2021
First seenFeb 12, 2021
Weakness typeCWE-77Command injection

How to fix

Update
  • netgear ac2100_firmware1.2.0.76 or later
  • netgear ac2400_firmware1.2.0.76 or later
  • netgear ac2600_firmware1.2.0.76 or later
  • netgear r6700_firmware1.2.0.76 or later
  • netgear r6800_firmware1.2.0.76 or later
  • netgear r6900_firmware1.2.0.76 or later
  • netgear r7200_firmware1.2.0.76 or later
  • netgear r7350_firmware1.2.0.76 or later
  • netgear r7400_firmware1.2.0.76 or later
  • netgear r7450_firmware1.2.0.76 or later
  • netgear r6220_firmware1.1.0.104 or later
  • netgear r6230_firmware1.1.0.104 or later

Affected products

ProductAffected versionsFixed in
netgear ac2100_firmwarev < 1.2.0.761.2.0.76
netgear ac2400_firmwarev < 1.2.0.761.2.0.76
netgear ac2600_firmwarev < 1.2.0.761.2.0.76
netgear r6700_firmwarev < 1.2.0.761.2.0.76
netgear r6800_firmwarev < 1.2.0.761.2.0.76
netgear r6900_firmwarev < 1.2.0.761.2.0.76
netgear r7200_firmwarev < 1.2.0.761.2.0.76
netgear r7350_firmwarev < 1.2.0.761.2.0.76
netgear r7400_firmwarev < 1.2.0.761.2.0.76
netgear r7450_firmwarev < 1.2.0.761.2.0.76
netgear r6220_firmwarev < 1.1.0.1041.1.0.104
netgear r6230_firmwarev < 1.1.0.1041.1.0.104
netgear r6260_firmwarev < 1.1.0.781.1.0.78
netgear r6330_firmwarev < 1.1.0.781.1.0.78
netgear r6350_firmwarev < 1.1.0.781.1.0.78
netgear r6850_firmwarev < 1.1.0.781.1.0.78
netgear r6120_firmwarev < 1.0.0.761.0.0.76
netgear r6020_firmwarev < 1.0.0.481.0.0.48
netgear r6080_firmwarev < 1.0.0.481.0.0.48

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.