CVE-2024-23690: EOL Netgear FVS336v3 Telnet Configuration Backup Command Injection
The end-of-life Netgear FVS336Gv2 and FVS336Gv3 are affected by a command injection vulnerability in the Telnet interface. An authenticated and remote attacker can execute arbitrary OS commands as root over Telnet by sending crafted "util backupconfiguration" commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23690?
CVE-2024-23690 is categorized as a critical severity vulnerability due to its potential for remote command execution.
How do I fix CVE-2024-23690?
The recommended fix for CVE-2024-23690 is to discontinue use of the Netgear FVS336Gv2 and FVS336Gv3 devices since they are end-of-life.
Who is affected by CVE-2024-23690?
CVE-2024-23690 affects users of the end-of-life Netgear FVS336Gv2 and FVS336Gv3 routers.
Can CVE-2024-23690 be exploited remotely?
Yes, CVE-2024-23690 can be exploited remotely by an authenticated attacker via the Telnet interface.
What type of vulnerability is CVE-2024-23690?
CVE-2024-23690 is a command injection vulnerability in the Telnet interface of the affected devices.