Authenticated administrators connected to the local network can gain
elevated access to the router and make unauthorized changes to router
software and functionality.
An insufficient input validation vulnerability in the NETGEAR XR1000v2
allows attackers connected to the router's LAN to execute OS command
injections.