CVE-2024-51008

Summary

CVE-2024-51008 is a newly identified vulnerability affecting Netgear XR300 v1.0.3.78. The issue lies in the wiz_dyn.cgi file where the system_name parameter is susceptible to command injection. Malicious actors can exploit this vulnerability by sending a specially crafted request, allowing them to execute arbitrary OS commands and potentially gain unauthorized access to the affected device. This vulnerability poses a serious threat to network security and requires immediate attention from Netgear and its users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.