CVE-2020-27861
NETGEAR Orbi UA_Parser Host Name Command Injection Remote Code Execution Vulnerability
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UA_Parser utility. A crafted Host Name option in a DHCP request can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11076.
Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en las instalaciones afectadas de los enrutadores NETGEAR Orbi versión 2.5.1.16. No es requerida una autenticación para explotar esta vulnerabilidad. El fallo específico se presenta dentro de la utilidad UA_Parser. Una opción de nombre de host diseñada en una petición DHCP puede desencadenar la ejecución de una llamada de sistema compuesta a partir de una cadena suministrada por el usuario. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de root. Era ZDI-CAN-11076
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the UA_Parser utility. A crafted Host Name option in a DHCP request can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of root.
*Credits:
Shaunak Mirani
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-10-27 CVE Reserved
- 2020-12-15 CVE Published
- 2024-02-29 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-20-1430 | Third Party Advisory |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Netgear Search vendor "Netgear" | Cbk40 Firmware Search vendor "Netgear" for product "Cbk40 Firmware" | < 2.6.1.38 Search vendor "Netgear" for product "Cbk40 Firmware" and version " < 2.6.1.38" | - |
Affected
| in | Netgear Search vendor "Netgear" | Cbk40 Search vendor "Netgear" for product "Cbk40" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Cbk43 Firmware Search vendor "Netgear" for product "Cbk43 Firmware" | < 2.6.1.38 Search vendor "Netgear" for product "Cbk43 Firmware" and version " < 2.6.1.38" | - |
Affected
| in | Netgear Search vendor "Netgear" | Cbk43 Search vendor "Netgear" for product "Cbk43" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Cbr40 Firmware Search vendor "Netgear" for product "Cbr40 Firmware" | < 2.6.1.38 Search vendor "Netgear" for product "Cbr40 Firmware" and version " < 2.6.1.38" | - |
Affected
| in | Netgear Search vendor "Netgear" | Cbr40 Search vendor "Netgear" for product "Cbr40" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex6200 Firmware Search vendor "Netgear" for product "Ex6200 Firmware" | < 1.0.1.82 Search vendor "Netgear" for product "Ex6200 Firmware" and version " < 1.0.1.82" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex6200 Search vendor "Netgear" for product "Ex6200" | v2 Search vendor "Netgear" for product "Ex6200" and version "v2" | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex7700 Firmware Search vendor "Netgear" for product "Ex7700 Firmware" | < 1.0.0.210 Search vendor "Netgear" for product "Ex7700 Firmware" and version " < 1.0.0.210" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex7700 Search vendor "Netgear" for product "Ex7700" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Ex8000 Firmware Search vendor "Netgear" for product "Ex8000 Firmware" | < 1.0.1.224 Search vendor "Netgear" for product "Ex8000 Firmware" and version " < 1.0.1.224" | - |
Affected
| in | Netgear Search vendor "Netgear" | Ex8000 Search vendor "Netgear" for product "Ex8000" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk12 Firmware Search vendor "Netgear" for product "Rbk12 Firmware" | < 2.6.1.44 Search vendor "Netgear" for product "Rbk12 Firmware" and version " < 2.6.1.44" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk12 Search vendor "Netgear" for product "Rbk12" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk13 Firmware Search vendor "Netgear" for product "Rbk13 Firmware" | < 2.6.1.44 Search vendor "Netgear" for product "Rbk13 Firmware" and version " < 2.6.1.44" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk13 Search vendor "Netgear" for product "Rbk13" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk14 Firmware Search vendor "Netgear" for product "Rbk14 Firmware" | < 2.6.1.44 Search vendor "Netgear" for product "Rbk14 Firmware" and version " < 2.6.1.44" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk14 Search vendor "Netgear" for product "Rbk14" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk15 Firmware Search vendor "Netgear" for product "Rbk15 Firmware" | < 2.6.1.44 Search vendor "Netgear" for product "Rbk15 Firmware" and version " < 2.6.1.44" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk15 Search vendor "Netgear" for product "Rbk15" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbr10 Firmware Search vendor "Netgear" for product "Rbr10 Firmware" | < 2.6.1.44 Search vendor "Netgear" for product "Rbr10 Firmware" and version " < 2.6.1.44" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbr10 Search vendor "Netgear" for product "Rbr10" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbs10 Firmware Search vendor "Netgear" for product "Rbs10 Firmware" | < 2.6.1.44 Search vendor "Netgear" for product "Rbs10 Firmware" and version " < 2.6.1.44" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbs10 Search vendor "Netgear" for product "Rbs10" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk20w Firmware Search vendor "Netgear" for product "Rbk20w Firmware" | < 2.6.1.36 Search vendor "Netgear" for product "Rbk20w Firmware" and version " < 2.6.1.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk20w Search vendor "Netgear" for product "Rbk20w" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk23w Firmware Search vendor "Netgear" for product "Rbk23w Firmware" | < 2.6.1.36 Search vendor "Netgear" for product "Rbk23w Firmware" and version " < 2.6.1.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk23w Search vendor "Netgear" for product "Rbk23w" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk20 Router Firmware Search vendor "Netgear" for product "Rbk20 Router Firmware" | < 2.6.1.36 Search vendor "Netgear" for product "Rbk20 Router Firmware" and version " < 2.6.1.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk20 Search vendor "Netgear" for product "Rbk20" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk20 Satellite Firmware Search vendor "Netgear" for product "Rbk20 Satellite Firmware" | < 2.6.1.38 Search vendor "Netgear" for product "Rbk20 Satellite Firmware" and version " < 2.6.1.38" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk20 Search vendor "Netgear" for product "Rbk20" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk22 Router Firmware Search vendor "Netgear" for product "Rbk22 Router Firmware" | < 2.6.1.36 Search vendor "Netgear" for product "Rbk22 Router Firmware" and version " < 2.6.1.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk22 Search vendor "Netgear" for product "Rbk22" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk22 Satellite Firmware Search vendor "Netgear" for product "Rbk22 Satellite Firmware" | < 2.6.1.38 Search vendor "Netgear" for product "Rbk22 Satellite Firmware" and version " < 2.6.1.38" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk22 Search vendor "Netgear" for product "Rbk22" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk23 Router Firmware Search vendor "Netgear" for product "Rbk23 Router Firmware" | < 2.6.1.36 Search vendor "Netgear" for product "Rbk23 Router Firmware" and version " < 2.6.1.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk23 Search vendor "Netgear" for product "Rbk23" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk23 Satellite Firmware Search vendor "Netgear" for product "Rbk23 Satellite Firmware" | < 2.6.1.38 Search vendor "Netgear" for product "Rbk23 Satellite Firmware" and version " < 2.6.1.38" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk23 Search vendor "Netgear" for product "Rbk23" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbr20 Firmware Search vendor "Netgear" for product "Rbr20 Firmware" | < 2.6.1.36 Search vendor "Netgear" for product "Rbr20 Firmware" and version " < 2.6.1.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbr20 Search vendor "Netgear" for product "Rbr20" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbs20 Firmware Search vendor "Netgear" for product "Rbs20 Firmware" | < 2.6.1.38 Search vendor "Netgear" for product "Rbs20 Firmware" and version " < 2.6.1.38" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbs20 Search vendor "Netgear" for product "Rbs20" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk30 Firmware Search vendor "Netgear" for product "Rbk30 Firmware" | < 2.6.1.36 Search vendor "Netgear" for product "Rbk30 Firmware" and version " < 2.6.1.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk30 Search vendor "Netgear" for product "Rbk30" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk33 Firmware Search vendor "Netgear" for product "Rbk33 Firmware" | < 2.6.1.36 Search vendor "Netgear" for product "Rbk33 Firmware" and version " < 2.6.1.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk33 Search vendor "Netgear" for product "Rbk33" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk40 Router Firmware Search vendor "Netgear" for product "Rbk40 Router Firmware" | < 2.6.1.36 Search vendor "Netgear" for product "Rbk40 Router Firmware" and version " < 2.6.1.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk40 Search vendor "Netgear" for product "Rbk40" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk40 Satellite Firmware Search vendor "Netgear" for product "Rbk40 Satellite Firmware" | < 2.6.1.38 Search vendor "Netgear" for product "Rbk40 Satellite Firmware" and version " < 2.6.1.38" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk40 Search vendor "Netgear" for product "Rbk40" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk43 Router Firmware Search vendor "Netgear" for product "Rbk43 Router Firmware" | < 2.6.1.36 Search vendor "Netgear" for product "Rbk43 Router Firmware" and version " < 2.6.1.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk43 Search vendor "Netgear" for product "Rbk43" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk43 Satellite Firmware Search vendor "Netgear" for product "Rbk43 Satellite Firmware" | < 2.6.1.38 Search vendor "Netgear" for product "Rbk43 Satellite Firmware" and version " < 2.6.1.38" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk43 Search vendor "Netgear" for product "Rbk43" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk43s Router Firmware Search vendor "Netgear" for product "Rbk43s Router Firmware" | < 2.6.1.36 Search vendor "Netgear" for product "Rbk43s Router Firmware" and version " < 2.6.1.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk43s Search vendor "Netgear" for product "Rbk43s" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk43s Satellite Firmware Search vendor "Netgear" for product "Rbk43s Satellite Firmware" | < 2.6.1.38 Search vendor "Netgear" for product "Rbk43s Satellite Firmware" and version " < 2.6.1.38" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk43s Search vendor "Netgear" for product "Rbk43s" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk44 Router Firmware Search vendor "Netgear" for product "Rbk44 Router Firmware" | < 2.6.1.36 Search vendor "Netgear" for product "Rbk44 Router Firmware" and version " < 2.6.1.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk44 Search vendor "Netgear" for product "Rbk44" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk44 Satellite Firmware Search vendor "Netgear" for product "Rbk44 Satellite Firmware" | < 2.6.1.38 Search vendor "Netgear" for product "Rbk44 Satellite Firmware" and version " < 2.6.1.38" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk44 Search vendor "Netgear" for product "Rbk44" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbr40 Firmware Search vendor "Netgear" for product "Rbr40 Firmware" | < 2.6.1.36 Search vendor "Netgear" for product "Rbr40 Firmware" and version " < 2.6.1.36" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbr40 Search vendor "Netgear" for product "Rbr40" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbs40 Firmware Search vendor "Netgear" for product "Rbs40 Firmware" | < 2.6.1.38 Search vendor "Netgear" for product "Rbs40 Firmware" and version " < 2.6.1.38" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbs40 Search vendor "Netgear" for product "Rbs40" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk50 Firmware Search vendor "Netgear" for product "Rbk50 Firmware" | < 2.6.1.40 Search vendor "Netgear" for product "Rbk50 Firmware" and version " < 2.6.1.40" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk50 Search vendor "Netgear" for product "Rbk50" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk50v Firmware Search vendor "Netgear" for product "Rbk50v Firmware" | < 2.6.1.40 Search vendor "Netgear" for product "Rbk50v Firmware" and version " < 2.6.1.40" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk50v Search vendor "Netgear" for product "Rbk50v" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbk52w Firmware Search vendor "Netgear" for product "Rbk52w Firmware" | < 2.6.1.40 Search vendor "Netgear" for product "Rbk52w Firmware" and version " < 2.6.1.40" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbk52w Search vendor "Netgear" for product "Rbk52w" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbr50 Firmware Search vendor "Netgear" for product "Rbr50 Firmware" | < 2.6.1.40 Search vendor "Netgear" for product "Rbr50 Firmware" and version " < 2.6.1.40" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbr50 Search vendor "Netgear" for product "Rbr50" | - | - |
Safe
|
| Netgear Search vendor "Netgear" | Rbs50 Firmware Search vendor "Netgear" for product "Rbs50 Firmware" | < 2.6.1.40 Search vendor "Netgear" for product "Rbs50 Firmware" and version " < 2.6.1.40" | - |
Affected
| in | Netgear Search vendor "Netgear" | Rbs50 Search vendor "Netgear" for product "Rbs50" | - | - |
Safe
|