PT-2024-8267 · NetGear · Netgear Xr300+2

Published 2024-11-05 · Updated 2024-11-05 · CVE-2024-51021

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Netgear XR300 version 1.0.3.78 Netgear R7000P version 1.3.3.154 Netgear R6400 v2 version 1.0.4.128

Description The issue is related to a command injection vulnerability via the wan gateway parameter at the genie fix2.cgi endpoint. This allows attackers to execute arbitrary OS commands via a crafted request. The vulnerability is associated with the failure to neutralize special elements used in the operating system command when processing the wan gateway parameter. Exploitation of the vulnerability may allow a remote attacker to execute arbitrary commands.

Recommendations For Netgear XR300 version 1.0.3.78, consider disabling access to the genie fix2.cgi endpoint until a patch is available. For Netgear R7000P version 1.3.3.154, restrict the use of the wan gateway parameter in the genie fix2.cgi endpoint to minimize the risk of exploitation. For Netgear R6400 v2 version 1.0.4.128, avoid using the wan gateway parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2024-09820

CVE-2024-51021

Affected Products

Netgear R6400V2

Netgear R7000P

Netgear Xr300

References · 6

• https://osv.dev/vulnerability/CVE-2024-51021 · Vendor Advisory
• https://netgear.com/about/security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-51021 · Security Note
• https://bdu.fstec.ru/vul/2024-09820 · Security Note
• https://twitter.com/CVEnew/status/1853818908945305800 · Twitter Post
• ❌ https://github.com/wudipjq/my_vuln/blob/main/Netgear5/vuln_57/57.md · Note, Deleted