CVE-2024-35522

published 2024-10-11

CVE-2024-35522: Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injection in operating_mode.cgi via the ap_mode…

high 7.2 CVSS 3.1

AV N AC L PR H UI N S U C H I H A H

Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injection in operating_mode.cgi via the ap_mode parameter with ap_24g_manual set to 1 and ap_24g_manual_sec set to NotNone.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
netgear	ex3700_firmware	< 1.0.0.98	1.0.0.98

CWE-77