CVE-2024-54804

Summary

CVE-2024-54804 is a newly disclosed vulnerability affecting the Netgear WNR854T 1.5.2 (North America) router. The issue involves a command injection weakness in the post.cgi application. By sending a carefully crafted request to this component, an attacker can successfully update the nvram parameter wan_hostname, leading to a reboot. Upon reboot, an attacker can inject commands, potentially gaining unauthorized access to the router or executing arbitrary code. This vulnerability poses a significant risk to network security and requires immediate attention from affected users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.