CVE-2023-38921

Netgear WG302v2 (v5.2.9) and WAG302v2 (v5.1.19) are affected by command injection vulnerabilities in the upgrade_handler function, exploitable via the firmwareRestore and firmwareServerip parameters. Root cause is improper handling of those inputs leading to potential arbitrary command execution....