Unscored CVE-2023-50089 EUVD-2023-54919GHSA-46jg-h552-883r

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution …

Published Dec 15, 2023 · Updated Nov 26, 2024 · Assigned by mitre

Description

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication.

References

https://www.netgear.com/about/security/
https://github.com/NoneShell/Vulnerabilities/blob/main/NETGEAR/WNR2000v4-1.0.0.70-Authorized-Command-Injection.md