Unscored CVE-2019-14527 EUVD-2019-5697GHSA-jq36-wchh-wc44

An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. System commands can be executed, via the web interface, a…

Published Aug 14, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. System commands can be executed, via the web interface, after authentication.

References

https://www.pentestpartners.com/security-blog/how-not-to-do-cross-site-request-forgery-protection-the-netgear-nighthawk-m1/