NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.