NETGEAR R6400 devices before 1.0.1.70 are affected by server-side injection.
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
Link | Tags |
---|---|
https://kb.netgear.com/000064069/Security-Advisory-for-Server-Side-Injection-on-R6400-PSV-2019-0178 | patch vendor advisory |