NETGEAR JR6150 EUVD-2026-35454

Exploitation requires two explicit conditions per the CVSS 4.0 vector: (1) low-privilege authentication (PR:L) - the attacker must possess or acquire a valid low-privilege credential on the JR6150, such as a WiFi user account or a guest account with management interface access; (2) specific attack prerequisites (AT:P) - one or more environmental or configuration conditions must be satisfied, though the exact nature of these prerequisites is not detailed in the available CVE description or references. The description limits the attack surface to 'users connected to the local WiFi Networks,' meaning exploitation is not possible from the WAN/internet side under standard router configurations. Additional limiting factors: exploitation has only been demonstrated in a firmware emulation environment (not validated on physical hardware, RE:L); no public exploit exists (E:U); and specific unspecified prerequisites must be present (AT:P). The discrepancy between AV:L in the CVSS vector and the WiFi-user scope in the description means the precise access boundary - whether a local OS account or adjacent network position suffices - is unconfirmed and should be verified against the vendor advisory.

The CVSS 4.0 base score of 4.4 (Medium) reflects several compounding constraints: Attack Vector Local (AV:L), Attack Requirements Present (AT:P indicating specific preconditions must be met), and Privileges Required Low (PR:L). A notable discrepancy exists between the CVSS vector and the description: AV:L in CVSS 4.0 denotes local OS-level access, yet the description explicitly states exploitation is possible by 'users connected to the local WiFi Networks,' which aligns more closely with AV:A (Adjacent). Defenders should verify the true attack vector with NETGEAR or the reporting researcher before scoping exposure. The confidentiality, integrity, and availability impact on the vulnerable component are all rated High (VC:H/VI:H/VA:H), indicating full device compromise once exploited. E:U (no confirmed exploit) and RE:L (research environment only, not production hardware) significantly reduce near-term urgency. No EPSS score was provided in the available data. The Vulnerable system Remediation Level V:D (Difficult) reflects the permanent lack of a vendor fix. Despite the moderate CVSS score, organizations still running JR6150 hardware face an unmitigatable vulnerability with high-impact potential - a condition that elevates long-term operational risk above what the numeric score alone suggests.

An attacker who has obtained a low-privilege account on the NETGEAR JR6150 - such as a standard WiFi client with access to the router's management interface - submits a crafted input string to a vulnerable configuration or diagnostic field that is passed unsanitized to a shell command on the router's embedded Linux system. The injected commands execute with elevated privileges, granting the attacker full control over router configuration, traffic routing, and connected network segments. No public exploit code has been identified, and the finding is based on firmware emulation rather than confirmed behavior on production hardware.