Skip to content
OpenAdvisories

Archive

10 January 2025

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-12847 Public exploit EPSS 30%

    NETGEAR DGN setup.cgi OS Command Injection

    NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerabil…