VULNERABILITY INTELLIGENCE

CVE-2024-23690

CVSS score7.2 HIGH

EPSS probability1.13%

CISA KEVNot currently listed

Published2025-02-04

Last modified2026-06-17

Description

The end-of-life Netgear FVS336Gv2 and FVS336Gv3 are affected by a command injection vulnerability in the Telnet interface. An authenticated and remote attacker can execute arbitrary OS commands as root over Telnet by sending crafted "util backup_configuration" commands.