CVEDB API

Netgear EX6120 v1.0.0.68 is vulnerable to Command Injection in genie_fix2.cgi via the wan_dns1_pri parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.012

EPSS Ranking 78.2%

CVSS Severity

CVSS v3 Score 8.4

References

Products affected by CVE-2024-35518

Netgear » Ex6120 » Version: N/A

cpe:2.3:h:netgear:ex6120:-
Netgear » Ex6120 Firmware » Version: N/A

cpe:2.3:o:netgear:ex6120_firmware:-
Netgear » Ex6120 Firmware » Version: 1.0.0.32

cpe:2.3:o:netgear:ex6120_firmware:1.0.0.32
Netgear » Ex6120 Firmware » Version: 1.0.0.34

cpe:2.3:o:netgear:ex6120_firmware:1.0.0.34
Netgear » Ex6120 Firmware » Version: 1.0.0.40

cpe:2.3:o:netgear:ex6120_firmware:1.0.0.40
Netgear » Ex6120 Firmware » Version: 1.0.0.42

cpe:2.3:o:netgear:ex6120_firmware:1.0.0.42
Netgear » Ex6120 Firmware » Version: 1.0.0.48

cpe:2.3:o:netgear:ex6120_firmware:1.0.0.48
Netgear » Ex6120 Firmware » Version: 1.0.0.54

cpe:2.3:o:netgear:ex6120_firmware:1.0.0.54
Netgear » Ex6120 Firmware » Version: 1.0.0.64

cpe:2.3:o:netgear:ex6120_firmware:1.0.0.64
Netgear » Ex6120 Firmware » Version: 1.0.0.66

cpe:2.3:o:netgear:ex6120_firmware:1.0.0.66
Netgear » Ex6120 Firmware » Version: 1.0.0.68

cpe:2.3:o:netgear:ex6120_firmware:1.0.0.68