A critical command injection vulnerability in Netgear EX8000 firmware version V1.0.0.126 allows unauthenticated attackers to execute arbitrary commands on the device.

The vulnerability exists due to improper input sanitization within the switch_status function. An attacker can leverage this flaw to inject malicious system commands, which are then executed with elevated privileges on the underlying operating system.

Successful exploitation allows for complete takeover of the network device, which can be used as a foothold for lateral movement into the internal network. With a CVSS score of 9.8, this represents a critical risk to network integrity and confidentiality, potentially allowing attackers to intercept traffic or disable security controls.

Immediate Action: Update the firmware on the affected Netgear EX8000 device to the latest version provided by the manufacturer.

Proactive Monitoring: Monitor network traffic for unusual outbound connections from the device and audit system logs for unexpected command executions or configuration changes.

Compensating Controls: If a firmware update cannot be applied immediately, isolate the device from the public internet and restrict management interface access to trusted administrative IP addresses.

Public Exploit Available: Unknown

Command injection vulnerabilities in network infrastructure are highly dangerous. Administrators should treat this as a high-priority update to prevent unauthorized control over the network edge and ensure the continued security of the local environment.