CVE-2024-54804

Netgear WNR854T (firmware 1.5.2) is affected by CVE-2024-54804. The root cause is a command injection in the wan_hostname handling via the nvram parameter when calling post.cgi, which can trigger a reboot and arbitrary command execution. Affected product is the Netgear WNR854T; the issue is descr...

CVE-2024-54804

Netgear WNR854T 1.5.2 North America is vulnerable to Command Injection. An attacker can send a specially crafted request to post.cgi, updating the nvram parameter wanhostname and forcing a reboot. This will result in command injection...