CVE-2023-50089

2023-12-1500:00:00

mitre

www.cve.org

command injection

netgear wnr2000v4

http

soap authentication

cve-2023-50089

10 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.4%

JSON

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication.

References

github.com/NoneShell/Vulnerabilities/blob/main/NETGEAR/WNR2000v4-1.0.0.70-Authorized-Command-Injection.md

www.netgear.com/about/security/