CVE-2023-50089
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2023-50089 is a recently discovered vulnerability affecting NETGEAR WNR2000v4 routers running version 1.0.0.70. This issue permits command injection during SOAP authentication via HTTP. After a successful authentication, the system processes commands, posing a significant security risk as attackers can execute arbitrary commands on the targeted device. The implications of this vulnerability could lead to unauthorized access, data theft, or even complete system compromise. It is highly recommended that affected users upgrade their software to a more secure version as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Netgear, Inc.