CVE-2024-57232

Name of the Vulnerable Software and Affected Versions NETGEAR RAX5 version 1.0.2.26

Description A command injection issue was discovered in the NETGEAR RAX5 (AX1600 WiFi Router) via the ifname parameter in the apcli wps gen pincode function. This allows for potential exploitation.

Recommendations For version 1.0.2.26, as a temporary workaround, consider restricting access to the apcli wps gen pincode function until a patch is available. Avoid using the ifname parameter in the affected function to minimize the risk of exploitation.