Threat Investigation
Request a demo

CVE-2024-12847

Critical

Description

NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been observed to be exploited in the wild since at least 2017 and specifically by the Shadowserver Foundation on 2025-02-06 UTC.

SeverityCritical
CVSS9.8
Exploit probability—
ProductNetgear Dgn1000 Firmware
PublishedJan 10, 2025
First seenJan 10, 2025
Weakness typeCWE-78OS command injectionCWE-306Missing authentication for critical function

How to fix

Update
  • netgear dgn1000_firmware1.1.00.48 or later

Affected products

ProductAffected versionsFixed in
netgear dgn1000_firmwarev < 1.1.00.481.1.00.48

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.