CVE-2024-52022
Improper Neutralization of Special Elements used in a Command ('Command Injection') (CWE-77)
Published: Nov 5, 2024 / Updated: 14d ago
010
CVSS 8EPSS 0.04%High
CVE info copied to clipboard
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component wlg_adv.cgi via the apmode_gateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Timeline
CVE Assignment
NVD published the first details for CVE-2024-52022
Nov 5, 2024 at 3:15 PM
First Article
Feedly found the first article mentioning CVE-2024-52022. See article
Nov 5, 2024 at 3:21 PM / VulDB Recent Entries
CVSS Estimate
Feedly estimated the CVSS score as HIGH
Nov 5, 2024 at 3:21 PM
CVSS
A CVSS base score of 8 has been assigned.
Nov 5, 2024 at 4:40 PM / nvd
EPSS
EPSS Score was set to: 0.04% (Percentile: 10%)
Nov 6, 2024 at 10:26 AM
Affected Systems
Netgear/r8500
+null more
Attack Patterns
CAPEC-136: LDAP Injection
+null more
News
CVE Alert: CVE-2024-52022 - https://www. redpacketsecurity.com/cve_aler t_cve-2024-52022/ # OSINT # ThreatIntel # CyberSecurity # cve_2024_52022
CVE Alert: CVE-2024-52022
Everyone that supports the site helps enable new functionality. Affected Endpoints:
Security Bulletin 06 Nov 2024 - Cyber Security Agency of Singapore
For those vulnerabilities without assigned CVSS scores, please visit NVD for the updated CVSS vulnerability entries. CRITICAL VULNERABILITIES . CVE ...
We have just added an important vulnerability affecting Netgear R6400 and other products (CVE-2024-52022) https:// vuldb.com/?id.283135
Content warning: NETGEAR CVE-2024-52022 CVE-2024-52022 Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component wlg_adv.cgi via the apmode_gateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request. https://www. cve.org/CVERecord?id=CVE-2024- 52022 https://www. netgear.com/about/security/ https:// github.com/wudipjq/my_vuln/blo b/main/Netgear4/vuln_48/48.md # netgear # CVE_2024_52022 # bot
See 4 more articles and social media posts