SSD Advisory – Netgear Nighthawk R8300 upnpd PreAuth RCE

TL;DR Find out how we exploited an unauthenticated Netgear Nighthawk R8300 vulnerability and gained root access to the device. Vulnerability Summary The Nighthawk X8 AC5000 (R8300) router released in 2014, is a popular device sold by Netgear with almost 2000 positive reviews on Amazon. A vulnerability in the way the R8300 handles UPNP packets allows …

SSD Advisory – Netgear Nighthawk R8300 upnpd PreAuth RCE Read More »