CVE-2023-33533

2023-06-0600:00:00

mitre

www.cve.org

netgear

command injection

firmware vulnerability

web management

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

39.7%

JSON

Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are vulnerable to Command Injection. If an attacker gains web management privileges, they can inject commands into the post request parameters, gaining shell privileges.