Evil-DB LogoEvil-DB
← All CVEs

CVE-2024-35517

high · 8.4

Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usb_remote_smb_conf.cgi via the share_name parameter.

8.4
CVSS
15.0%
EPSS (exploit prob.)
97th
EPSS percentile
2024-10-11
Published

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-77

Affected products

VendorProductAffected versions
netgearxr1000_firmware1.0.0.64
netgearxr1000all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-35517