CVE-2024-57229

The vulnerability results from insufficient validation of input data passed through the devname parameter to the reset_wifi function. An attacker can inject malicious system commands through this parameter, which will be executed by the device with the privileges of the process handling the request. The attack vector is network-based and requires no privileges or user interaction.

An attacker can remotely execute arbitrary commands on the device (RCE), which in practice means complete takeover of the router, including the possibility of compromising the confidentiality, integrity, and availability of the device and the entire network it manages.

Apply patches available from the manufacturer according to the references. Until an update is applied, it is recommended to restrict access to the router's management interface only to trusted hosts and to disable remote management from the WAN side.

NETGEAR RAX5 (AX1600 WiFi Router) in firmware version V1.0.2.26