Command Injection Flaw in Netgear R8500 Router
CVE-2024-52021

Currently unrated

Key Information:

Vendor

Netgear
Status
R8500 Router
Vendor
CVE Published:
5 November 2024

What is CVE-2024-52021?

The Netgear R8500 router version 1.0.2.160 contains a command injection vulnerability in the wan_gateway parameter found at bsw_fix.cgi. This flaw enables attackers to exploit the system through crafted requests, allowing them to execute arbitrary operating system commands remotely. This vulnerability poses significant risks as it could lead to unauthorized access and manipulation of the affected device.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.netgear.com/about/security/
https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vul...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.