writeups.xyz / Finding bugs to trigger Unauthenticated Command Injection in a NETGEAR router (PSV-2022–0044)

Submitter : c2a

Date: 25 March 2022

Bounty : undisclosed

Vulnerabilities :

• XSS
• Arbitrary File Read
• Authentication Bypass
• OS Command Injection
• RCE

Programs :

• Netgear

Authors :

• Stypr (@Stereotype32)

Link :
https://flattsecurity.medium.com/finding-bugs-to-trigger-unauthenticated-command-injection-in-a-netgear-router-psv-2022-0044-2b394fb9edc