NETGEAR DGN1000B Firmware 1.1.00.24
Approved changes feed: RSS · Atom
cpe:2.3:o:netgear:dgn1000b_firmware:1.1.00.24:*:*:*:*:*:*:*
part: o version: 1.1.00.24 update: *
| Vendor | Netgear (99700297-c207-56f4-abd0-97ab0c8bf3ab) |
|---|---|
| Product | Dgn1000B Firmware (79f51394-931d-56d4-a608-d138d7a322aa) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-10061 |
vulnerable | 2026-06-08 05:03:51.939641 |
Netgear Routers setup.cgi RCE
An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN1000B model firmware versions 1.1.00.24 and 1.1.00.45) via the TimeToLive parameter in the setup.cgi endpoint. The vulnerability arises from improper input neutralization, enabling command injection through crafted POST requests. This flaw enables remote attackers to deploy payloads or manipulate system state post-authentication.
Published: 2025-08-01T20:45:34.559Z
Updated: 2026-04-07T14:03:14.806Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.