The network hardware solution manufacturer Netgear has patched two (2) high-severity zero-day vulnerabilities affecting certain routers and their ProSAFE network management system. The first flaw, tracked as CVE-2023-41183, is an authentication bypass vulnerability in the Simple Object Access Protocol (SOAP) API that could allow unauthenticated attackers that have gained an initial foothold in the network to access and exploit Netgear’s Orbi 760 routers (RBR760). The second vulnerability, tracked as CVE-2023-41182, is a post-authentication command injection security vulnerability in their ProSAFE NMS300 software which if successfully exploited, could allow an already authenticated attacker to execute arbitrary code on the ProSAFE network management system. Although authentication is required, attackers can bypass the mechanism to exploit this flaw. Currently, there is no indication that either of these vulnerabilities have been exploited in the wild. Both flaws have been patched, and CTIX analysts recommend that all impacted users ensure they have upgraded to the most recent software versions. Instructions can be found in the Netgear advisories linked below.