CVE-2024-51021

published 2024-11-05

CVE-2024-51021: Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a command injection vulnerability via the wan_gateway parameter at…

high 8 CVSS 3.1

AV A AC L PR L UI N S U C H I H A H

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a command injection vulnerability via the wan_gateway parameter at genie_fix2.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
netgear	r6400v2_firmware	—	—
netgear	r7000p_firmware	—	—
netgear	xr300_firmware	—	—

CWE-78