Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which due to several faulty aspects of the authentication scheme allows the attacker to create or overwrite a file with specific content. It may lead to denial of service.