PT-2023-1511 · NetGear · Netgear Wndr3700V2

·

CVE-2023-0849

·

Publicado

2023-02-15

·

Atualizado

2024-05-17

CVSS v2.0

10

Crítica

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Netgear WNDR3700v2 version 1.0.1.14
Description A critical vulnerability has been found in the Web Interface component of the Netgear WNDR3700v2 router. The issue is related to the lack of input data sanitization, which can lead to command injection. The attack can be initiated remotely.
Recommendations For Netgear WNDR3700v2 version 1.0.1.14, consider disabling remote access to the Web Interface until a patch is available. Restrict access to the Web Interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-00938
CVE-2023-0849

Produtos afetados

Netgear Wndr3700V2