The vulnerability of the vif_enable function in the Netgear RAX5 router’s built-in software allows a hacker to execute arbitrary commands.

The vulnerability of the vifenable function in Netgear RAX5 router’s embedded software is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2024-57235

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...

CVE-2024-57235

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...

CVE-2024-57235

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...

CVE-2024-57235: Improper Neutralization of Special Elements used in a Command

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...

CVE-2024-57235

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...

CVE-2024-57235

NETGEAR RAX5 (AX1600) firmware 1.0.2.26 is affected by CVE-2024-57235 due to a command injection in the iface parameter of the vif_enable function. Public sources describe an attack that can execute arbitrary commands via this parameter. The NVD/CVE metadata indicates a high-severity, network-bas...

CVE-2024-57235

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...

NETGEAR RAX5 安全漏洞

The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability that originates from the iface parameter in the vifenable function failing to correctly filter constructed command special characters, commands, and so on. An attacker can exploit this...

CVE-2024-57226: Improper Neutralization of Special Elements used in a Command

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...

CVE-2024-57226

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...

CVE-2024-37626

A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vifenable function...

CVE-2024-37626: Improper Neutralization of Special Elements used in an OS Command

A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vifenable function...