CVE-2024-54806

Netgear WNR854T 1.5.2 (North America) is vulnerable to Arbitrary command execution in cmd.cgi which allows for the execution of system commands via the web…

Critical · published March 31, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
64.9
In the wild
Unconfirmed
What it is

🚨 A simple trip to the web interface is all it takes for an attacker to execute any command on your Netgear WNR854T router! 🔥 Think of it like leaving a restaurant's back door wide open – anyone can just waltz in and do anything they please in the kitchen, from cooking up trouble to stealing ingredients! This vulnerability allows attackers to execute arbitrary system commands, potentially leading to full control over your network. Imagine them tampering with settings, intercepting data, or even launching attacks against other devices – absolute chaos!

Put simply

Think of it like leaving a restaurant's back door wide open – anyone can just waltz in and do anything they please in the kitchen, from cooking up trouble to stealing ingredients! The vulnerability in Netgear WNR854T version 1.5.2 arises from insufficient input validation in cmd.cgi, allowing remote attackers to send crafted commands through the web interface, bypassing normal restrictions.

What to do

This vulnerability allows attackers to execute arbitrary system commands, potentially leading to full control over your network. Imagine them tampering with settings, intercepting data, or even launching attacks against other devices – absolute chaos! Update your Netgear router firmware to version 1.6.0 immediately to patch this security hole. Additionally, consider changing access credentials and monitoring your network for any unauthorized activities. You've got this! Follow these steps, and you'll have your router secured in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01081 · 64.9th percentile
Published
2025-03-31T00:00Z
EPSS history
Timeline
  • 31 MAR 00:00Z
    Netgear WNR854T 1.5.2 (North America) is vulnerable to Arbitrary command execution in cmd.cgi which allows for the execution of system commands via the web…
    cvelistv5