Netgear R7000 and R6400 routers and possibly other models are vulnerable to arbitrary command injection.

To read the full story, please see:

http://www.kb.cert.org/vuls/id/582384