by Kastro
Paper/Archive/CVE-2023-0849

CVE-2023-0849

Netgear WNDR3700v2 — Netgear WNDR3700v2 Web Interface command injection

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 86.7.867 × 2017.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A vulnerability has been found in Netgear WNDR3700v2 1.0.1.14 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221152.

Affected

ProductAffectedFixed inSource
WNDR3700v21.0.1.14–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulDB (CNA)4.7CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
VulDB (CNA)4.7CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

References

exploitvuldb.com/?id.221152refvuldb.com/?ctiid.221152