CVE-2024-57232: Command Injection
Published May 5, 2025
·Updated
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function.
Affected Software
3 affected components
Netgear RAX5
All of the following
Netgear Rax50 Firmware=1.0.2.26
Netgear RAX50
Event History
May 5, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:18 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-57232?
CVE-2024-57232 is classified as a high-severity command injection vulnerability affecting the NETGEAR RAX5 router.
2
How do I fix CVE-2024-57232?
To fix CVE-2024-57232, update the NETGEAR RAX5 router firmware to the latest version provided by the vendor.
3
What is the impact of CVE-2024-57232?
The impact of CVE-2024-57232 includes unauthorized access and potential control over the affected NETGEAR RAX5 device.
4
Which versions of NETGEAR routers are affected by CVE-2024-57232?
CVE-2024-57232 specifically affects NETGEAR RAX5 routers running firmware version 1.0.2.26.
5
How does the command injection in CVE-2024-57232 occur?
The command injection in CVE-2024-57232 occurs via the ifname parameter in the apcli_wps_gen_pincode function.