Vulnerability Details CVE-2023-50089
A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 81.6%
CVSS Severity
CVSS v3 Score 9.8
References
- https://github.com/NoneShell/Vulnerabilities/blob/main/NETGEAR/WNR2000v4-1.0.0.70-Authorized-Command-Injection.md
- https://www.netgear.com/about/security/
- https://github.com/NoneShell/Vulnerabilities/blob/main/NETGEAR/WNR2000v4-1.0.0.70-Authorized-Command-Injection.md
- https://www.netgear.com/about/security/
Products affected by CVE-2023-50089
-
cpe:2.3:h:netgear:wnr2000:v4
-
cpe:2.3:o:netgear:wnr2000_firmware:1.0.0.70