ГлавнаяУязвимости → CVE-2024-35520
8.4высокая

CVE-2024-35520

Описание

Netgear R7000 1.0.11.136 is vulnerable to Command Injection in RMT_invite.cgi via device_name2 parameter.

Затрагиваемое ПО
Netgear R7000 firmwareNetgear R7000
CVSS
Балл8.4 — высокая
ВекторCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Источники
https://kb.netgear.com/000066027/Security-Advisory-for-Post-Authentication-Command-Injection-on-the-R7000-PSV-2023-0154