CVE-2024-52022: Command Injection
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component wlgadv.cgi via the apmodegateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-52022?
CVE-2024-52022 is a high severity vulnerability due to the potential for command injection leading to arbitrary code execution.
Which devices are affected by CVE-2024-52022?
CVE-2024-52022 affects Netgear R8500, XR300, R7000P, and R6400 devices running specific firmware versions.
How do I fix CVE-2024-52022?
To mitigate CVE-2024-52022, it is recommended to update the affected Netgear devices to the latest firmware versions provided by the vendor.
What is the nature of the attack vector for CVE-2024-52022?
CVE-2024-52022 allows attackers to exploit a command injection vulnerability through a crafted request to the wlg_adv.cgi component.
Can CVE-2024-52022 be exploited remotely?
Yes, CVE-2024-52022 can be exploited remotely, making it critical to address this vulnerability promptly.