Xiaochen Zou

The issue is related to a potential user-mode attacker being able to read a buffer with an incorrect length. This could lead to denial of service.

This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR routers. The specific flaw exists within the `readycloud control.cgi` file, resulting from the lack of authentication prior to allowing access to functionality. An attacker can leverage this issue to execute code in the context of root. The exploitation of this issue may allow a remote attacker to bypass authentication via an alternative name.