Command Injection Vulnerability in NETGEAR Insight Cloud
CVE-2019-12591

6.8MEDIUM

Key Information:

Vendor

Netgear
Status
Insight
Vendor
CVE Published:
3 June 2019

What is CVE-2019-12591?

The NETGEAR Insight Cloud, prior to firmware version 5.6, is susceptible to a command injection vulnerability that allows remote authenticated users to execute arbitrary commands on the system. This flaw can lead to unauthorized access and manipulation of the device, significantly jeopardizing network security. NETGEAR has provided mitigations and guidance in their security advisory to help users protect their systems against potential exploits.

References

https://kb.netgear.com/000060977/Security-Advisory-for-Po...
x_refsource_MISC

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2019-12591 : Command Injection Vulnerability in NETGEAR Insight Cloud