CVE-2024-57235: Command Injection
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57235?
CVE-2024-57235 has been classified as a high severity command injection vulnerability, which could allow an attacker to execute arbitrary commands on the NETGEAR RAX5 router.
How do I fix CVE-2024-57235?
To mitigate CVE-2024-57235, update the firmware of the NETGEAR RAX5 router to the latest secure version provided by NETGEAR.
What are the potential impacts of CVE-2024-57235?
If exploited, CVE-2024-57235 could lead to unauthorized access and control over the NETGEAR RAX5 router, compromising network security.
Which devices are affected by CVE-2024-57235?
CVE-2024-57235 affects the NETGEAR RAX5 router running firmware version 1.0.2.26.
Is there a workaround for CVE-2024-57235?
As a temporary measure, users can limit access to the router's management interface and ensure that strong passwords and security settings are in place.