CVE-2023-33532

There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management privileges, they can inject commands into the post request parameters, thereby gaining shell privileges.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-06-06

Last modified

2026-07-09

Weaknesses

CWE-77

Affected products

• R6250 Firmware (Netgear)

References

• https://github.com/D2y6p/CVE/blob/main/Netgear/CVE-2023-33532/Netgear_R6250_RCE.pdf