Vulnerability · Published Feb 15, 2023 · Assigned by VulDB
CVE-2023-0849Netgear WNDR3700v2 Web Interface command injection
Medium 4.7
In plain English
A medium-severity command injection in WNDR3700v2 from Netgear. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.8% (higher than 87% of all known vulnerabilities).
Severity (CVSS 3.1)4.7Medium
Exploit odds (30 days)2.8%top 13.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A vulnerability has been found in Netgear WNDR3700v2 1.0.1.14 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221152.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Netgear | WNDR3700v2 | 1.0.1.14 |
Weakness: CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
References
- https://vuldb.com/?id.221152 vdb-entry, technical-description, exploit
- https://vuldb.com/?ctiid.221152 signature