CRITICAL🇵🇱 Wersja polska

CVE-2023-33532

CVSS 9.8v3.1pub. 2023-06-06upd. 2026-07-09

There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management privileges, they can inject commands into the post request parameters, thereby gaining shell privileges.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Netgear R6250

    HW
    Netgear
    all versions

  • Netgear R6250 Firmware

    OS
    Netgear
    1.0.4.48
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-34563CRITICAL9.8PL ✓same product

Buffer Overflow po uwierzytelnieniu w Netgear R6250 Firmware

CVE-2021-45610CRITICAL9.6PL ✓same product

Pre-authentication buffer overflow w urządzeniach NETGEAR (CVE-2021-45610)

CVE-2021-45609CRITICAL9.6PL ✓same product

NETGEAR — Pre-Authentication Buffer Overflow w routerach i modemach

CVE-2021-45527CRITICAL9.6PL ✓same product

Buffer overflow po uwierzytelnieniu w urządzeniach NETGEAR (wiele modeli)

CVE-2021-38516CRITICAL10.0PL ✓same product

Brak kontroli dostępu na poziomie funkcji w urządzeniach NETGEAR