CVE-2020-14438

CVE-2020-14438 describes a critical command injection vulnerability affecting various NETGEAR Orbi mesh WiFi systems, including RBK752, RBK852, and RBR850 models, among others, running firmware versions prior to 3.2.15.25. An unauthenticated attacker on the adjacent network can exploit this flaw to execute arbitrary commands. With a CVSS score of 8.8 (High), this vulnerability poses a significant risk, allowing for complete compromise of confidentiality, integrity, and availability of the affected devices. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered notable community discussion, indicating awareness and potential for future exploitation.