Vulnerability · Published Jan 10, 2025 · Assigned by VulnCheck

CVE-2024-12847NETGEAR DGN setup.cgi OS Command Injection

Critical 9.8

In plain English

A critical-severity OS command injection in DGN1000 from NETGEAR. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 30.4% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)30.4%top 1.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack tooling1Metasploit

Official description

NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been observed to be exploited in the wild since at least 2017 and specifically by the Shadowserver Foundation on 2025-02-06 UTC.

Affected products (as reported)

Vendor	Product	Versions
NETGEAR	DGN1000	0 – before 1.1.00.48

Weakness: CWE-78, CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://seclists.org/bugtraq/2013/Jun/8 third-party-advisory, technical-description
https://www.exploit-db.com/exploits/25978 exploit
https://www.exploit-db.com/exploits/43055 exploit
https://vulncheck.com/advisories/netgear-dgn third-party-advisory