Cbr40
Monthly
Authenticated administrators on the local network of NETGEAR CBR40, R7000, R7000P, and RAX40 routers can execute unauthorized commands via insufficient input validation in the NTP time server setting, affecting only router integrity (no confidentiality or availability impact). This medium-severity vulnerability (CVSS 4.0 base 4.3) requires the attacker to already possess administrator credentials and be connected to the router's local network, making it a post-compromise integrity concern rather than a remote attack vector. No public exploit code or active exploitation has been identified, and NETGEAR has released firmware updates to address the issue.
Authenticated administrators on the local network of NETGEAR CBR40, R7000, R7000P, and RAX40 routers can execute unauthorized commands via insufficient input validation in the NTP time server setting, affecting only router integrity (no confidentiality or availability impact). This medium-severity vulnerability (CVSS 4.0 base 4.3) requires the attacker to already possess administrator credentials and be connected to the router's local network, making it a post-compromise integrity concern rather than a remote attack vector. No public exploit code or active exploitation has been identified, and NETGEAR has released firmware updates to address the issue.