critical9.8
CVE-2019-14527
An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03.
Impact
An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. System commands can be executed, via the web interface, after authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Mr1100 Firmware | before 12.06.03 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.pentestpartners.com/security-blog/how-not-to-do-cross-site-request-forgery-protection-the-netgear-nighthawk-m1/
- https://www.bleepingcomputer.com/news/security/4g-router-vulnerabilities-let-attackers-take-full-control/
- https://www.pentestpartners.com/security-blog/how-not-to-do-cross-site-request-forgery-protection-the-netgear-nighthawk-m1/