CVE-2022-29383

Name of the Vulnerable Software and Affected Versions NETGEAR ProSafe SSL VPN firmware versions FVS336Gv2 and FVS336Gv3

Description The issue is related to a SQL injection vulnerability via USERDBDomains.Domainname at "cgi-bin/platform.cgi". This vulnerability may allow a remote attacker to execute arbitrary SQL queries.

Recommendations For versions FVS336Gv2 and FVS336Gv3, as a temporary workaround, consider restricting access to the "cgi-bin/platform.cgi" endpoint until a patch is available. Avoid using the USERDBDomains.Domainname variable in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.