CVE-2023-38921

Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgrade_handler function via the…

published August 7, 2023

CVSS
—
EPSS
2%
Percentile
76.3
In the wild
Unconfirmed
What it is

Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgrade_handler function via the firmwareRestore and firmwareServerip parameters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01646 · 76.3th percentile
Published
2023-08-07T00:00Z
EPSS history
Timeline
  • 07 AUG 00:00Z
    Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgrade_handler function via the…
    cvelistv5