PT-2019-13734 · NetGear · Netgear Nighthawk M1

G Richter · Publicado 2019-08-14 · Atualizado 2019-08-27 · CVE-2019-14527

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR Nighthawk M1 (MR1100) versions prior to 12.06.03

Description An issue allows system commands to be executed via the web interface after authentication.

Recommendations For versions prior to 12.06.03, update to version 12.06.03 or later to resolve the issue.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2019-14527

Produtos afetados

Netgear Nighthawk M1

Referências · 4

• 🔥 https://pentestpartners.com/security-blog/how-not-to-do-cross-site-request-forgery-protection-the-netgear-nighthawk-m1 · Exploit
• https://osv.dev/vulnerability/CVE-2019-14527 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-14527 · Nota de Segurança
• https://bleepingcomputer.com/news/security/4g-router-vulnerabilities-let-attackers-take-full-control · Nota