CVE-2024-57230: Command Injection
Published May 5, 2025
·Updated
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpinwps function.
Affected Software
3 affected components
Netgear RAX5
All of the following
Netgear Rax50 Firmware=1.0.2.26
Netgear RAX50
Event History
May 5, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:18 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-57230?
CVE-2024-57230 has been classified as a high severity command injection vulnerability.
2
How do I fix CVE-2024-57230?
To fix CVE-2024-57230, update your NETGEAR RAX5 router firmware to the latest version provided by NETGEAR.
3
Which devices are affected by CVE-2024-57230?
CVE-2024-57230 affects the NETGEAR RAX5 (AX1600 WiFi Router) running firmware version 1.0.2.26.
4
What type of vulnerability is CVE-2024-57230?
CVE-2024-57230 is a command injection vulnerability that can be exploited via the ifname parameter in the apcli_do_enr_pin_wps function.
5
Can CVE-2024-57230 lead to unauthorized access?
Yes, successful exploitation of CVE-2024-57230 can potentially allow attackers to execute arbitrary commands on the affected router.