CVE-2024-57229

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:netgear:rax50_firmware:1.0.2.26:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:*

History

07 May 2025, 16:40

Type Values Removed Values Added
CPE cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rax50_firmware:1.0.2.26:*:*:*:*:*:*:*
CWE CWE-77
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
First Time Netgear rax50 Firmware
Netgear rax50
Netgear
References () https://github.com/yanggao017/vuln/blob/main/NETGEAR/RAX5/CI_7_reset_wifi/README.md - () https://github.com/yanggao017/vuln/blob/main/NETGEAR/RAX5/CI_7_reset_wifi/README.md - Exploit

05 May 2025, 17:18

Type Values Removed Values Added
New CVE

Information

Published : 2025-05-05 17:18

Updated : 2025-05-07 16:40


NVD link : CVE-2024-57229

Mitre link : CVE-2024-57229


JSON object : View

Products Affected

netgear

  • rax50
  • rax50_firmware
CWE
CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')