setup.cgi on NETGEAR R6020 1.0.0.48 devices allows an admin to execute arbitrary shell commands via shell metacharacters in the ntp_server field.
No PoCs from references.
- https://github.com/attilaszia/linux-iot-cves