A vulnerability classified as very critical has been found in NETGEAR DGN1000. This affects an unknown functionality of the file setup.cgi of the component HTTP Request Handler. The manipulation with an unknown input leads to a authentication bypass vulnerability. CWE is classifying the issue as CWE-288. A product requires authentication, but the product has an alternate path or channel that does not require authentication. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been exploited in the wild since at least 2017.

The weakness was shared by Roberto Paleari. It is possible to read the advisory at seclists.org. This vulnerability is uniquely identified as CVE-2024-12847 since 12/20/2024. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 01/10/2025).

Upgrading to version 1.1.00.48 eliminates this vulnerability.

Productinfo

Type

• Wireless LAN Software

Vendor

• NETGEAR

Name

• DGN1000

Version

• 1.1.00.46

License

• commercial

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion