An issue in NETGEAR-DGND4000 v.1.1.00.15_1.00.15 allows a remote malicious user to escalate privileges via the next_file parameter to the /setup.cgi component.