CVE-2024-57231

The CVE-2024-57231 entry relates to NETGEAR RAX5 (AX1600 WiFi Router) with firmware version 1.0.2.26. The vulnerability is a command injection in the apcli_do_enr_pbc_wps function caused by improper handling of the ifname parameter, enabling arbitrary command execution. Public details across conn...

NETGEAR RAX5 安全漏洞

The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability that originates from the iface parameter in the vifenable function failing to correctly filter constructed command special characters, commands, and so on. An attacker can exploit this...

CVE-2024-57235

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...

CVE-2024-57234

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclicancelwps function...

CVE-2024-57234

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclicancelwps function...

CVE-2024-57231

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpbcwps function...

CVE-2024-57235

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...

CVE-2024-57230

The NETGEAR RAX5 (AX1600 WiFi Router) running version 1.0.2.26 exposes a command injection vulnerability in the apcli_do_enr_pin_wps function, exploitable via the ifname parameter. The affected component is the router’s AP CLI logic related to WPS enrollment; root cause is improper handling of th...

NETGEAR RAX5 安全漏洞

The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability that stems from the iface parameter in the vifdisable function failing to correctly filter constructed command special characters, commands, and so on. An attacker can exploit this...

PT-2025-19733 · NetGear · Netgear Rax5

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the ifname parameter in the apcli wps gen pincode function. This allows for potential exploitation. Recommendations...

CVE-2024-57233

NETGEAR RAX5 AX1600 WiFi Router v1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...

CVE-2024-57232: Improper Neutralization of Special Elements used in a Command

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...

CVE-2024-57229

NETGEAR RAX5 (AX1600 WiFi Router) v1.0.2.26 has a command injection in the reset_wifi function via the devname parameter due to insufficient input filtering. Affected component: reset_wifi; root cause: devname not properly sanitized. Impact: potential arbitrary command execution with network acce...

CVE-2024-57229

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...

CVE-2024-57229: Improper Neutralization of Special Elements used in a Command

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...

PT-2025-19732 · NetGear · Netgear Rax5

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the ifname parameter in the apcli do enr pbc wps function. Recommendations: For version 1.0.2.26, consider...

CVE-2024-57231: Improper Neutralization of Special Elements used in a Command

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpbcwps function...

CVE-2024-57234: Improper Neutralization of Special Elements used in a Command

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclicancelwps function...

CVE-2024-57230: Improper Neutralization of Special Elements used in a Command

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpinwps function...

CVE-2024-57234

CVE-2024-57234 (NETGEAR RAX5 AX1600 Router) involves a command-injection in the apcli_cancel_wps function triggered by the ifname parameter. The vulnerability affects NETGEAR RAX5 firmware version 1.0.2.26 and can lead to arbitrary command execution with network access, exploitation complexity co...