Authenticated command injection via firmware input

Command injection in NETGEAR device firmware before the listed fixed versions allows remote authenticated users to execute commands via adjacent network requests. The vendor advisory identifies a post-authentication command-injection condition but does not disclose the specific firmware function, parameter, or parsing operation that mishandles attacker input. Access requires an authenticated account on the adjacent network, and successful exploitation can compromise confidentiality, integrity, and availability of the device.