EXPOSURES › CVE-2023-33532
CVE-2023-33532
CRITICAL
DETAIL
SourceNVD · cve
Published2023-06-06
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-33532 ↗
⚡ RCE
SHAME 50/100
rce
There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management privileges, they can inject commands into the post request parameters, thereby gaining shell privileges.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
PLAYERS IMPLICATED
DESCRIPTION
There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management privileges, they can inject commands into the post request parameters, thereby gaining shell privileges.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.