PT-2023-3102 · NetGear · Netgear R6250

Published 2023-05-22 · Updated 2025-01-08 · CVE-2023-33532

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Netgear R6250 router with Firmware Version 1.0.4.48

Description The issue is related to a command injection vulnerability. It is associated with a lack of input data sanitization measures. If an attacker gains web management privileges, they can inject commands into the post request parameters, thereby gaining shell privileges. This could allow a remote attacker to elevate their privileges and execute arbitrary commands.

Recommendations For Firmware Version 1.0.4.48, consider disabling web management privileges until a patch is available to prevent command injection. Restrict access to the router's web management interface to minimize the risk of exploitation. Avoid using the vulnerable firmware version until an update is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2023-03194

CVE-2023-33532

Affected Products

Netgear R6250

References · 8

• 🔥 https://github.com/D2y6p/CVE/blob/main/Netgear/CVE-2023-33532/Netgear_R6250_RCE.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-33532 · Security Note
• https://bdu.fstec.ru/vul/2023-03194 · Security Note
• https://osv.dev/vulnerability/CVE-2023-33532 · Vendor Advisory
• https://vuldb.com/ru/?id.230844 · Note
• http://netgear.com · Note
• https://t.me/cibsecurity/65010 · Telegram Post
• https://t.me/cvenotify/51889 · Telegram Post