CVE-2024-51009

Summary

CVE-2024-51009 is a command injection vulnerability affecting Netgear R8500 v1.0.2.160. The issue is located in the ether.cgi file, specifically in the wan_gateway parameter. Cybercriminals can exploit this flaw by sending a specially crafted request, leading to the execution of arbitrary OS commands. Successful exploitation could result in significant unauthorized access and potential data breaches. It is recommended that users update their Netgear R8500 firmware as soon as a patch becomes available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.