CVE-2024-52020: Command Injection

Published Nov 5, 2024

Updated

Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wangateway parameter at wizfix2.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.

Affected Software

3 affected components

Netgear R8500

All of the following

Netgear R8500 Firmware=1.0.2.160

Netgear R8500

Event History

Nov 5, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-52020?

CVE-2024-52020 is classified as a high-severity command injection vulnerability.

How do I fix CVE-2024-52020?

To fix CVE-2024-52020, update the Netgear R8500 firmware to the latest version provided by the manufacturer.

What are the potential impacts of exploiting CVE-2024-52020?

Exploiting CVE-2024-52020 allows attackers to execute arbitrary OS commands, potentially compromising the device and network.

Which devices are affected by CVE-2024-52020?

CVE-2024-52020 affects the Netgear R8500 router running firmware version 1.0.2.160.

How can I check if my device is vulnerable to CVE-2024-52020?

You can check if your device is vulnerable to CVE-2024-52020 by verifying its firmware version against the affected version information.