CVE-2024-35520

Summary

CVE-2024-35520 is a newly identified vulnerability affecting the Netgear R7000 router running firmware version 1.0.11.136. This issue allows an attacker to inject malicious commands into the RMT_invite.cgi page by exploiting a vulnerability in the device_name2 parameter. Successful exploitation could result in unauthorized control over the affected device, potentially leading to significant security risks, including data theft and unauthorized access to the local network. Users are advised to update their firmware to the latest version as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.