Executive brief
A security vulnerability in NETGEAR Orbi 370 series routers could allow an attacker to take control of the device. By intercepting and tampering with internet traffic while an administrator is performing specific management tasks, a remote attacker could execute unauthorized commands. This could lead to a complete compromise of the router, potentially allowing the attacker to monitor network traffic or disrupt internet services.
Technical details
This vulnerability, classified as an improper restriction of operations within memory bounds (CWE-119), affects NETGEAR Orbi 370 series devices. An attacker positioned to perform a Man-in-the-Middle (MitM) attack between the router and the internet can exploit this flaw when a device administrator performs specific management actions. Successful exploitation allows for remote command execution (RCE) on the device. The attack requires high complexity and user interaction from an administrator. The issue is resolved in firmware version V12.1.2.7 and later.
Affected products
- NETGEAR Orbi 370 series before V12.1.2.7
Timeline
- 2026-06-09: advisory: Initial disclosure by NETGEAR and NVD publication
- 2026-06-09: patched: Fixed in firmware version V12.1.2.7