VULNERABILITY INTELLIGENCE

CVE-2023-33532

CVSS score9.8 CRITICAL
EPSS probability16.17%
CISA KEVNot currently listed
Published2023-06-06
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management privileges, they can inject commands into the post request parameters, thereby gaining shell privileges.

Weakness classification

  • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

Primary references