by Kastro
Paper/Archive/CVE-2024-12847

CVE-2024-12847

NETGEAR DGN1000 — NETGEAR DGN setup.cgi OS Command Injection

EPSS 30%public exploitCVSS 9.8
critical.is priorityof 100
59
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 98.2.982 × 2019.6Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been observed to be exploited in the wild since at least 2017 and specifically by the Shadowserver Foundation on 2025-02-06 UTC.

Affected

ProductAffectedFixed inSource
DGN1000< 1.1.00.481.1.00.48CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

writeupseclists.org/bugtraq/2013/Jun/8exploitexploit-db.com/exploits/25978exploitexploit-db.com/exploits/43055writeupvulncheck.com/advisories/netgear-dgn