CVE-2024-35522

Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injection in operating_mode.cgi via the ap_mode…

High · published October 11, 2024

CVSS v3.1
8.4
EPSS
2%
Percentile
79.2
In the wild
Unconfirmed
What it is

Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injection in operating_mode.cgi via the ap_mode parameter with ap_24g_manual set to 1 and ap_24g_manual_sec set to NotNone.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:C/UI:N
CVSS v4.0
Not supplied
EPSS
0.01870 · 79.2th percentile
Published
2024-10-11T00:00Z
EPSS history
Timeline
  • 11 OCT 00:00Z
    Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injection in operating_mode.cgi via the ap_mode…
    cvelistv5