PT-2024-7141 · NetGear · Netgear Ex6120

Published 2024-02-21 · Updated 2024-10-16 · CVE-2024-35518

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AC:L/AV:A/A:H/C:H/I:H/PR:H/S:C/UI:N

Name of the Vulnerable Software and Affected Versions Netgear EX6120 version 1.0.0.68

Description The issue is related to a Command Injection vulnerability in the genie fix2.cgi script via the wan dns1 pri parameter. This vulnerability may allow a remote attacker to execute arbitrary commands. The vulnerability is associated with the lack of data sanitization on the management level.

Recommendations For Netgear EX6120 version 1.0.0.68, as a temporary workaround, consider disabling the genie fix2.cgi script until a patch is available. Restrict access to the wan dns1 pri parameter in the affected API endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2024-08472

CVE-2024-35518

Affected Products

Netgear Ex6120

References · 14

• 🔥 https://github.com/consrc/cves/blob/main/CVE-2024-35518.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-35518 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35518 · Security Note
• https://bdu.fstec.ru/vul/2024-08472 · Security Note
• https://kb.netgear.com/000066030/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Extenders-PSV-2023-0150-PSV-2023-0151 · Note
• https://vuldb.com/?id.280333 · Note
• https://t.me/cvedetector/7867 · Telegram Post
• https://twitter.com/CveFindCom/status/1845940709045469521 · Twitter Post
• https://t.me/zerodayalert/358 · Telegram Post
• https://twitter.com/iSecurity/status/1846066989351264680 · Twitter Post
• https://t.me/cvenotify/98348 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1846032521542189514 · Twitter Post
• https://twitter.com/CVEnew/status/1845940057360027981 · Twitter Post
• https://kb.netgear.com/000066028/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Extenders-PSV-2023-0153 · Note