CVE-2023-50089: Command Injection
Published Dec 15, 2023
·Updated
A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication.
Affected Software
2 affected components
All of the following
Netgear Wnr2000 Firmware=1.0.0.70
Netgear WNR2000=v4
Event History
Dec 15, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-50089?
CVE-2023-50089 is classified as a high-severity command injection vulnerability.
2
How do I fix CVE-2023-50089?
To mitigate CVE-2023-50089, it is recommended to upgrade your NETGEAR WNR2000v4 firmware to the latest version.
3
What software versions are affected by CVE-2023-50089?
CVE-2023-50089 specifically affects NETGEAR WNR2000v4 firmware version 1.0.0.70.
4
What kind of vulnerability is CVE-2023-50089?
CVE-2023-50089 is identified as a command injection vulnerability that occurs during HTTP SOAP authentication.
5
Can exploitation of CVE-2023-50089 allow unauthorized access?
Yes, successful exploitation of CVE-2023-50089 can lead to command execution with potentially unauthorized access to the device.