Netgear R6850 V1.1.0.88 - Command Injection

Netgear R6850 router firmware version V1.1.0.88 suffers from a command injection vulnerability in the pingtest functionality. An unauthenticated attacker can inject arbitrary system commands through the c4IPAddr parameter, resulting in remote code execution as root. id: CVE-2024-30568 info: name:...

CVE-2024-30568

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter...

CVE-2024-30568

creationtimestamp| type| source ---|---|--- 2025-03-26 12:40:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-30568.yaml 2025-03-27 21:02:05+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3llf73zoxbk2f...

CVE-2024-30568

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter...

CVE-2024-30568

Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter...

CVE-2024-30568

The Netgear R6850 wireless router, specifically running firmware version V1.1.0.88 , is vulnerable to a command injection flaw within the ping_test functionality. The root cause is the c4-IPAddr parameter's failure to properly filter constructed command special characters. An unauthenticated atta...