This vulnerability in the NETGEAR EX3700 router stems from improper input validation (CWE-20). Authenticated administrators connected locally can exploit this flaw to modify router software and functionality without proper authorization. The CVSS 4.9 score reflects a medium severity with local attack vector and no privileges required, but with high impact on integrity. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

An attacker with authenticated administrator access on the local network can perform unauthorized modifications to the router's software and functionality. This could lead to changes in device behavior or configuration that compromise network security or availability. The impact is limited to local authenticated administrators and does not affect confidentiality or availability directly according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict administrative access to trusted users only and limit local network access to the router's management interface.