Netgear RAX43 漏洞列表

Netgear RAX43 version 1.0.3.96 contains a command injection and authentication bypass vulnerability. The readycloud_control.cgi CGI application is vulnerable to command injection in the name parameter. Additionally, the URL parsing functionality in the cgi-bin endpoint of the router containers a buffer overrun issue that can redirection control flow of the application. Note: This vulnerability uses a combination of CVE-2021-20166 and CVE-2021-20167.

Netgear RAX43存在缓冲区溢出漏洞，此漏洞是由于cgi-bin接口对用户请求的参数验证不当造成的。