Vulnerability Details CVE-2023-50089
A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.031
EPSS Ranking 86.1%
CVSS Severity
CVSS v3 Score 9.8
References
- https://github.com/NoneShell/Vulnerabilities/blob/main/NETGEAR/WNR2000v4-1.0.0.70-Authorized-Command-Injection.md
- https://www.netgear.com/about/security/
- https://github.com/NoneShell/Vulnerabilities/blob/main/NETGEAR/WNR2000v4-1.0.0.70-Authorized-Command-Injection.md
- https://www.netgear.com/about/security/
Products affected by CVE-2023-50089
-
cpe:2.3:h:netgear:wnr2000:v4
-
cpe:2.3:o:netgear:wnr2000_firmware:1.0.0.70