Netgear Access Control Error Vulnerability

Netgear RAX35 is a router from Netgear, Inc. A hardware device that connects two or more networks and acts as a gateway between networks.An access control error vulnerability exists in firmware versions prior to Netgear RAX35, RAX38 and RAX40 routers v1.0.4.102, which stems from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could exploit the vulnerability by sending a carefully constructed HTTP packet to access sensitive restricted information.