CVE-2024-57231

The vulnerability lies in the lack of proper validation of the ifname parameter passed to the apcli_do_enr_pbc_wps function. An attacker can provide a crafted parameter value containing malicious system commands that will be executed by the device. The attack is possible remotely, without requiring privileges or user interaction.

An attacker can gain full control over the device — achieve unauthorized execution of arbitrary system commands (RCE), and consequently compromise the confidentiality, integrity, and availability of the router and the network behind it.

Apply patches available from the manufacturer according to the references. It is recommended to monitor official Netgear firmware updates for the RAX5 model and implement them immediately. Until the patch is installed, it is advisable to restrict access to the device's administrative panel exclusively to trusted hosts on the local network.

Netgear RAX5 (AX1600 WiFi Router) with firmware version V1.0.2.26