CVE-2024-51021: Command Injection
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a command injection vulnerability via the wangateway parameter at geniefix2.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-51021?
CVE-2024-51021 is classified as a critical command injection vulnerability that can lead to arbitrary command execution.
How do I fix CVE-2024-51021?
To fix CVE-2024-51021, update your Netgear XR300, R7000P, or R6400 devices to the latest firmware version provided from the manufacturer.
What devices are affected by CVE-2024-51021?
CVE-2024-51021 affects the Netgear XR300, R7000P, and R6400 router models.
What types of attacks can CVE-2024-51021 facilitate?
CVE-2024-51021 allows attackers to execute arbitrary operating system commands through crafted requests.
Are there any workarounds for CVE-2024-51021?
Until a firmware update is applied for CVE-2024-51021, it is advised to secure the network and limit external access to the affected devices.