CVE-2021-27251

Name of the Vulnerable Software and Affected Versions: NETGEAR Nighthawk R7800 (affected versions not specified)

Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within handling of firmware updates, resulting from a fallback to an insecure protocol to deliver updates. An attacker can leverage this issue to execute code in the context of root.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue.