CVE-2023-38928

Name of the Vulnerable Software and Affected Versions Netgear R7100LG version 1.0.0.78

Description A command injection issue was discovered via the password parameter at the "usb remote invite.cgi" endpoint. This allows for potential exploitation.

Recommendations For Netgear R7100LG version 1.0.0.78, as a temporary workaround, consider restricting access to the "usb remote invite.cgi" endpoint until a patch is available. Avoid using the password parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.