PT-2025-13828 · NetGear · Netgear Wnr854T

Published 2024-11-16 · Updated 2025-03-31 · CVE-2024-54805

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Netgear WNR854T version 1.5.2

Description The issue allows an attacker to perform Command Injection. This can be achieved by sending a specially crafted request to the "post.cgi" endpoint, updating the get email parameter in nvram. After updating this parameter, an attacker can visit the "send log.cgi" endpoint, which uses the parameter in a system call, allowing command execution.

Recommendations For Netgear WNR854T version 1.5.2, as a temporary workaround, consider restricting access to the "post.cgi" and "send log.cgi" endpoints until a patch is available. Avoid using the get email parameter in the "post.cgi" endpoint until the issue is resolved.

Exploit

Fix

Code Injection

OS Command Injection

Weakness Enumeration

CWE-94

CWE-78

Related Identifiers

BDU:2025-03672

CVE-2024-54805

Affected Products

Netgear Wnr854T

References · 5

• 🔥 https://faultpoint.com/post/2025-03-25-8-cves-on-the-wnr854t-junkyard/#805 · Exploit
• https://osv.dev/vulnerability/CVE-2024-54805 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-03672 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-54805 · Security Note
• https://twitter.com/CVEnew/status/1906814546515501497 · Twitter Post