CVE-2024-35518

CWE-77 — Command Injection3 documents3 sources
Severity
6.8MEDIUM
EPSS
0.3%
top 49.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Netgear Ex6120 Firmware
Timeline
PublishedOct 14
Latest updateOct 15

Description

Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in genie_fix2.cgi via the wan_dns1_pri parameter.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 1.7 | Impact: 6.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-mx7j-q788-jq8x: Netgear EX6120 v1↗2024-10-15
▶
CVEList
CVE-2024-35518: Netgear EX6120 v1↗2024-10-14
▶