PT-2025-13829

CVE-2024-54806

·

Published

2024-11-16

·

Updated

2025-03-31

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Netgear WNR854T version 1.5.2
Description The issue allows for arbitrary command execution in cmd.cgi, enabling the execution of system commands via the web interface.
Recommendations For Netgear WNR854T version 1.5.2, consider disabling access to the cmd.cgi interface until a patch is available. Restrict access to the web interface to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
CVE-2024-54806
BDU:2025-03673
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com