Lucene search
HistoryAug 07, 2023 - 7:15 p.m.
CVE-2023-38921
netgear
wg302v2
wag302v2
command injection
firmwarerestore
firmwareserverip
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0005 Low
EPSS
Percentile
18.0%
Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgrade_handler function via the firmwareRestore and firmwareServerip parameters.
Affected configurations
Node
netgearwg302v2_firmwareMatch5.2.9
netgearwg302v2Match-
Node
netgearwag302v2_firmwareMatch5.1.19
netgearwag302v2Match-
Related
cvelist
cvelist
CVE-2023-38921
2023-08-07 00:00:00
cve
cve
CVE-2023-38921
2023-08-07 19:15:10
prion
prion
Command injection
2023-08-07 19:15:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0005 Low
EPSS
Percentile
18.0%
Related for NVD:CVE-2023-38921