Arbitrary Command Execution Vulnerability in NETGEAR R6020 1.0.0.48 via setup.cgi

Arbitrary Command Execution Vulnerability in NETGEAR R6020 1.0.0.48 via setup.cgi

CVE-2021-41383 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

setup.cgi on NETGEAR R6020 1.0.0.48 devices allows an admin to execute arbitrary shell commands via shell metacharacters in the ntp_server field.

Learn more about our Cis Benchmark Audit For Server Software.