https://flatt.tech/research/tags/authentication/ Recent content in Authentication on GMO Flatt Security Research Hugo en Sat, 26 Mar 2022 00:00:00 +0000 https://flatt.tech/research/posts/finding-bugs-to-trigger-unauthenticated-command-injection-in-a-netgear-router-psv-2022-0044/ Sat, 26 Mar 2022 00:00:00 +0000 https://flatt.tech/research/posts/finding-bugs-to-trigger-unauthenticated-command-injection-in-a-netgear-router-psv-2022-0044/ <h2 id="preface">Preface</h2> <p>Hi, I’m stypr (<a href="https://twitter.com/stereotype32" target="_blank" rel="noopener">@stereotype32</a> ) from Flatt Security Inc.</p> <p>Last year, I wrote a blog post about technical explanations about 0days found in Japanese OSS products.</p> <p>I have found a lot of vulnerabilities in various products since then. Unfortunately, most bugs I found did not get it fixed right away, so I did not get any chances to share some exciting vulnerabilities I found until today.</p> <p>This article will explain how I found various vulnerabilities and chained some of the vulnerabilities into an unauthenticated command execution without any preconditions in a NETGEAR’s WAC124(AC2000) router.</p>