CVE-2023-38921

Name of the Vulnerable Software and Affected Versions Netgear WG302v2 version 5.2.9 Netgear WAG302v2 version 5.1.19

Description The issue is related to command injection vulnerabilities in the upgrade handler function. These vulnerabilities can be exploited via the firmwareRestore and firmwareServerip parameters, potentially allowing a remote attacker to execute arbitrary commands.

Recommendations For Netgear WG302v2 version 5.2.9, consider disabling the upgrade handler function until a patch is available. For Netgear WAG302v2 version 5.1.19, restrict access to the parameters firmwareRestore and firmwareServerip to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.