Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has the router’s administrator credentials to run unauthorized commands on the router. This vulnerability could impact the integrity of the affected router. There is no impact on confidentiality or availability of the affected router.
Attack Parameters
Attack Vector
Adjacent
Requires local network access
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
High
Admin privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
None
No data leak
Integrity
High
Complete data modification
Availability
None
No disruption
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products
netgear:r7000
netgear:rax40
netgear:cbr40
netgear:r7000p
References 5
https://www.netgear.com/support/product/cbr40/
a2826606-91e7-4eb6-899e-8484bd4575d5
https://www.netgear.com/support/product/r7000/
a2826606-91e7-4eb6-899e-8484bd4575d5
https://www.netgear.com/support/product/r7000p/
a2826606-91e7-4eb6-899e-8484bd4575d5
https://www.netgear.com/support/product/rax40/
a2826606-91e7-4eb6-899e-8484bd4575d5
https://kb.netgear.com/000070958/October-2026-NETGEAR-Security-Advisory
NVD