EUVD-2026-98777
GHSA-c4rg-x772-7mg3
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessGain authenticated admin access on LAN
-
ExploitSubmit crafted input via PPPoE Setup
-
ImpactTrigger unauthorized configuration change
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V2 - Validation and Business Logic Input validation, allowlisting
|
| Exploitation Conditions | Requires an attacker already authenticated as an administrator to the R7300DST management interface (PR:H) and positioned on the local/adjacent network (AV:A), interacting specifically with the PPPoE Setup configuration feature whose input is insufficiently validated. Exploitation is limited by: the need for valid admin credentials, LAN/adjacent-network reachability (not routable from the internet), and the fact that the flaw has only been demonstrated against a simulated firmware build and is not confirmed on physical production hardware. Impact is confined to integrity (unauthorized configuration actions); no confidentiality or availability impact is indicated. |
| Impact | This is a low-priority issue despite being vendor-reported. All signals point to limited real-world risk: the CVSS 4.0 vector (AV:A/AC:L/PR:H/UI:N) requires an adjacent-network position AND high privileges (PR:H - a logged-in administrator), with impact limited to integrity only (VI:H, VC:N/VA:N). The vector further carries E:U (exploit unproven) and U:Amber. There is no CISA KEV listing, no public POC, and no EPSS value supplied. Critically, NETGEAR's own description states the flaw 'was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices' - so even the existence of the vulnerability in shipped firmware is unverified. The practical attacker must already hold admin credentials and LAN adjacency, meaning an attacker in that position can generally reconfigure the router anyway, sharply reducing the marginal value of this flaw. Note a data conflict: the input Tags label this 'Authentication Bypass,' but the description and PR:H metric describe an authenticated-administrator action, NOT an authentication bypass - the tag appears mislabeled and should not drive prioritization. |
| Exploit ScenarioDerived | An attacker who has already gained administrator access to an R7300DST web interface from the local/adjacent network submits crafted input through the PPPoE Setup feature, which is insufficiently validated (CWE-20), causing the router to perform unauthorized configuration actions. No public exploit code is identified, and the behavior has only been reproduced against a simulated firmware image, not a physical device. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 13, 2026
This is a low-priority issue despite being vendor-reported: authenticated administrators on the local network can make unauthorized configuration changes through insufficient validation in the NETGEAR R7300DST PPPoE Setup feature. The impact is integrity-only, with no confidentiality or availability effect, and exploitation requires valid admin credentials plus LAN/adjacent-network reachability rather than internet exposure. No public exploit identified at time of analysis, and the flaw has only been demonstrated against a simulated firmware build, not physical production hardware.
RemediationAI
No vendor-released patch or fixed firmware version is identified in the provided data at time of analysis; check and apply the latest firmware or advisory from NETGEAR's R7300DST support page at https://www.netgear.com/support/product/r7300dst. Until a fix is confirmed, restrict the router management interface to trusted administrative hosts on the LAN or adjacent network and disable any remote or WAN management exposure, since the assessed vector requires adjacent-network position and authenticated admin access (AV:A/PR:H). Use unique, strong admin credentials and audit router logs for unexpected PPPoE or WAN configuration changes; these controls reduce exposure but do not correct the underlying CWE-20 validation flaw. If the router uses PPPoE for ISP connectivity, disabling the PPPoE Setup feature entirely is not a practical mitigation because it can break WAN service, so the priority is limiting who can reach the admin interface and monitoring configuration drift. Because the flaw was only demonstrated against simulated firmware, confirm production impact against the vendor before applying disruptive restrictions.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The NETGEAR R7300DST is a consumer router; the CPE cpe:2.3:a:netgear:r7300dst:*:*:*:*:*:*:*:* uses a wildcard version, indicating the provided data does not pin a specific firmware range. The vulnerable feature is PPPoE Setup, which configures Point-to-Point Protocol over Ethernet WAN credentials and connection parameters on the router management interface. CWE-20 (Improper Input Validation) means the router fails to validate or sanitize input in that feature, allowing an already-authenticated administrator to trigger unauthorized configuration actions; despite the Authentication Bypass tag, the CVSS vector PR:H and the description indicate the attacker must already hold admin privileges, so this is not an unauthenticated bypass. CVSS 4.0 metrics in the input (AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U) and the independent CVSS 3.1 assessment (AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) agree on adjacent-network access, high privileges, no user interaction, and integrity-only impact. The flaw is reachable only from the local or adjacent network, not the internet, and has been reproduced only on a simulated firmware build, so production-device behavior remains unconfirmed.
Know when R7300Dst gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber
Adjacent LAN reach (AV:A) and an authenticated administrator (PR:H) performing an integrity-only unauthorized action (I:H), with no confidentiality or availability impact.
Primary rating from Vendor (NETGEAR).
CVSS VectorVendor: NETGEAR
DescriptionCVE.org
Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
Exploit-DB