CVE-2024-57230

The vulnerability results from improper sanitization of the ifname parameter passed to the apcli_do_enr_pin_wps function. An attacker can inject arbitrary system commands through a properly crafted ifname parameter value, which will then be executed by the router with system privileges. The attack is possible remotely, without authentication and without user interaction.

An attacker gains the ability to remotely execute arbitrary system commands on the vulnerable router (RCE), resulting in complete device takeover, including access to sensitive configuration data and the ability to compromise network integrity and availability.

Apply patches available from the manufacturer according to the references. It is recommended to monitor the NETGEAR support page for firmware updates. Temporarily, consider restricting access to the router's management interface only from trusted local networks.

NETGEAR RAX5 (AX1600 WiFi Router) in firmware version V1.0.2.26