PT-2024-7222 · NetGear · Netgear Ex3700

Published 2024-02-21 · Updated 2024-11-09 · CVE-2024-35522

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Netgear EX3700 versions prior to 1.0.0.98

Description The issue is related to a lack of input sanitization in the operating mode.cgi script of the NETGEAR EX3700 router's firmware. This can be exploited by a remote attacker to execute arbitrary commands using the ap mode parameter when ap 24g manual is set to 1 and ap 24g manual sec is set to NotNone.

Recommendations For versions prior to 1.0.0.98, update to version 1.0.0.98 or later to resolve the issue. As a temporary workaround, consider restricting access to the operating mode.cgi script and avoiding the use of the ap mode parameter until a patch is applied. Additionally, restrict the use of ap 24g manual and ap 24g manual sec parameters in the affected API endpoint until the issue is resolved.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2024-08561

CVE-2024-35522

Affected Products

Netgear Ex3700

References · 10

• 🔥 https://github.com/consrc/cves/blob/main/CVE-2024-35522.md · Exploit
• https://osv.dev/vulnerability/CVE-2024-35522 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-08561 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-35522 · Security Note
• https://kb.netgear.com/000066030/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Extenders-PSV-2023-0150-PSV-2023-0151 · Note
• https://t.me/cvenotify/101145 · Telegram Post
• https://twitter.com/UndercodeNews/status/1855083298516517313 · Twitter Post
• https://link.springer.com/chapter/10.1007/978-3-031-64171-8_21 · Note
• https://t.me/cvedetector/7752 · Telegram Post
• https://kb.netgear.com/000066028/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Extenders-PSV-2023-0153 · Note