Mornaner

A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is no confidentiality impact due to this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NETGEAR R6400v2 versions prior to 1.0.4.84 NETGEAR R6700 versions prior to 1.0.2.8 NETGEAR R6700v3 versions prior to 1.0.4.84 NETGEAR R6900 versions prior to 1.0.2.8 NETGEAR R7900 versions prior to 1.0.3.10 **Description** The issue allows command injection by an unauthenticated attacker. **Recommendations** For R6400v2 versions prior to 1.0.4.84, update to version 1.0.4.84 or later. For R6700 versions prior to 1.0.2.8, update to version 1.0.2.8 or later. For R6700v3 versions prior to 1.0.4.84, update to version 1.0.4.84 or later. For R6900 versions prior to 1.0.2.8, update to version 1.0.2.8 or later. For R7900 versions prior to 1.0.3.10, update to version 1.0.3.10 or later.