CVE-2024-50999

Summary

CVE-2024-50999 is a command injection vulnerability affecting Netgear R8500 v1.0.2.160. The sysNewPasswd parameter in password.cgi was identified as the source of the issue. Attackers can exploit this flaw to execute arbitrary OS commands by crafting malicious requests. This vulnerability poses a significant risk, as it allows unauthorized access and control over the device. Users are advised to update their Netgear R8500 routers to the latest firmware version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.