CVE-2017-18737

CVE-2017-18737 describes a critical command injection vulnerability affecting multiple NETGEAR router models, including JNR1010v2, JR6150, and R6220, among others, in specific firmware versions. This flaw allows an unauthenticated attacker on the local network to execute arbitrary commands on the device. With a CVSS score of 8.8 (High), the vulnerability presents a significant risk due to its low attack complexity and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, affected users should update their firmware immediately to mitigate this severe risk. Community discussion and media coverage for this CVE are minimal.