SQL Injection Vulnerability in NETGEAR SRX5308 Firewall

CVE-2019-17049

Summary

The NETGEAR SRX5308 device is susceptible to SQL injection attacks, which can be exploited to gain unauthorized access to the system. This vulnerability allows attackers to manipulate SQL queries by injecting malicious code through input fields. In September 2019, this weakness was actively exploited in the wild, enabling malicious actors to create new user accounts, thereby compromising the security of affected devices. Users of the SRX5308 should implement recommended security measures to mitigate this risk and safeguard their networks.

References