CVE-2020-27861 is a critical vulnerability affecting NETGEAR Orbi 2.5.1.16 routers, specifically within the UA_Parser utility. It allows unauthenticated, network-adjacent attackers to execute arbitrary code with root privileges by crafting a malicious Host Name option in a DHCP request. This vulnerability carries a CVSS score of 8.8 (HIGH), indicating a severe risk due to its low attack complexity and complete compromise potential for confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code in Metasploit or ExploitDB, community discussion on Reddit suggests awareness of this unauthenticated command injection.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2.6.1.38CPE matchmatch criteria | cpe:2.3:o:netgear:cbk40_firmware:*:*:*:*:*:*:*:* | ||
< 2.6.1.38CPE matchmatch criteria | cpe:2.3:o:netgear:cbk43_firmware:*:*:*:*:*:*:*:* | ||
< 2.6.1.38CPE matchmatch criteria | cpe:2.3:o:netgear:cbr40_firmware:*:*:*:*:*:*:*:* | ||
< 1.0.1.82CPE matchmatch criteria | cpe:2.3:o:netgear:ex6200_firmware:*:*:*:*:*:*:*:* | ||
< 1.0.0.210CPE matchmatch criteria | cpe:2.3:o:netgear:ex7700_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.