CVE-2024-35518

CVSS 3.1 Score 6.8 of 10 (medium)

Details

Published Oct 14, 2024
Updated: Mar 19, 2025
CWE ID 77

Summary

CVE-2024-35518: A command injection vulnerability has been identified in Netgear EX6120 v1.0.0.68's genie_fix2.cgi. An attacker can exploit this flaw by manipulating the wan_dns1_pri parameter to inject malicious commands, potentially gaining unauthorized access or control over the affected device. This vulnerability poses a significant risk to network security and requires immediate patching.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Netgear Ex6120 Firmware

Affected Vendors

  • Netgear, Inc.

Advisories, Assessments, and Mitigations