CVE-2023-33533: Command Injection
Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are vulnerable to Command Injection. If an attacker gains web management privileges, they can inject commands into the post request parameters, gaining shell privileges.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-33533?
CVE-2023-33533 is a vulnerability in Netgear D6220, D8500, R6700, and R6900 routers that allows an attacker with web management privileges to inject commands into a post request parameter.
Which Netgear devices are affected by CVE-2023-33533?
Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are affected by CVE-2023-33533.
How severe is CVE-2023-33533?
CVE-2023-33533 has a severity score of 8.8 (High).
How can an attacker exploit CVE-2023-33533?
An attacker can exploit CVE-2023-33533 by gaining web management privileges and injecting commands into a post request parameter.
How can I mitigate the CVE-2023-33533 vulnerability?
To mitigate the CVE-2023-33533 vulnerability, update the firmware of your affected Netgear devices to the latest version provided by the manufacturer.