Command injection

2023-08-0719:15:00

PRIOn knowledge base

www.prio-n.com

netgear

wg302v2

wag302v2

command injection

firmware upgrade

security vulnerability

nvd

9.2 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.0%

JSON

Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgrade_handler function via the firmwareRestore and firmwareServerip parameters.

CPENameOperatorVersion
wag302v2_firmwareeq5.1.19
wg302v2_firmwareeq5.2.9

CPE	Name	Operator	Version
	wag302v2_firmware	eq	5.1.19
	wg302v2_firmware	eq	5.2.9

References

github.com/FirmRec/IoT-Vulns/tree/main/netgear/upgrade_handler

www.netgear.com/about/security/