CVE-2024-51009
Severity CVSS v4.0:
Pending analysis
Type:
CWE-78
OS Command Injections
Publication date:
05/11/2024
Last modified:
02/05/2025
Description
Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at ether.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
Impact
Base Score 3.x
8.00
Severity 3.x
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:netgear:r8500_firmware:1.0.2.160:*:*:*:*:*:*:* | ||
cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page