CVE-2023-33533: Command Injection
First published: Tue Jun 06 2023(Updated: )
Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are vulnerable to Command Injection. If an attacker gains web management privileges, they can inject commands into the post request parameters, gaining shell privileges.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netgear D6220 Firmware | =1.0.0.80 | |
| NETGEAR D6220 | ||
| Netgear D8500 Firmware | =1.0.3.60 | |
| Netgear D8500 | ||
| Netgear R6700 Firmware | =1.0.2.26 | |
| NETGEAR R6700 | ||
| Netgear R6900 Firmware | =1.0.2.26 | |
| Netgear R6900 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-33533?
CVE-2023-33533 is a vulnerability in Netgear D6220, D8500, R6700, and R6900 routers that allows an attacker with web management privileges to inject commands into a post request parameter.
Which Netgear devices are affected by CVE-2023-33533?
Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are affected by CVE-2023-33533.
How severe is CVE-2023-33533?
CVE-2023-33533 has a severity score of 8.8 (High).
How can an attacker exploit CVE-2023-33533?
An attacker can exploit CVE-2023-33533 by gaining web management privileges and injecting commands into a post request parameter.
How can I mitigate the CVE-2023-33533 vulnerability?
To mitigate the CVE-2023-33533 vulnerability, update the firmware of your affected Netgear devices to the latest version provided by the manufacturer.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/type
- agent/event
- agent/severity
- agent/author
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- agent/description
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/netgear
- canonical/netgear d6220 firmware
- version/netgear d6220 firmware/1.0.0.80
- canonical/netgear d6220
- canonical/netgear d8500 firmware
- version/netgear d8500 firmware/1.0.3.60
- canonical/netgear d8500
- canonical/netgear r6700 firmware
- version/netgear r6700 firmware/1.0.2.26
- canonical/netgear r6700
- canonical/netgear r6900 firmware
- version/netgear r6900 firmware/1.0.2.26
- canonical/netgear r6900