Netgear routers have gaping remote access hole

Command injection made easy: you can simply append a system command to a certain router URL…and the router will run it for you.
Naked Security – Sophos