CVE-2023-33533
High
Description
Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are vulnerable to Command Injection. If an attacker gains web management privileges, they can inject commands into the post request parameters, gaining shell privileges.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Netgear D6220 Firmware
PublishedJun 6, 2023
First seenJun 6, 2023
Weakness typeCWE-77Command injection
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear d6220_firmware | 1.0.0.80 | — |
| netgear d8500_firmware | 1.0.3.60 | — |
| netgear r6700_firmware | 1.0.2.26 | — |
| netgear r6900_firmware | 1.0.2.26 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.