description: Netgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update functionality of the device. By triggering a system update check via the SOAP interface, the device is susceptible to command injection via preconfigured values.
problem types: Command Injection
affected:
{
product: Netgear Nighthawk R6700
vendor: n/a
versions:
status: affected, version: 1.0.4.120
}