Authenticated command execution via persisted configuration values

Command injection in affected NETGEAR router firmware allows attackers to execute arbitrary operating-system commands after authentication. The administration panel saves attacker-controlled configuration values that startup scripts and custom executables later insert into commands without equivalent input filtering. Authenticated administration access is required; injected commands can alter files or network services, and the malicious configuration can persist across restarts or updates.