high8.8
CVE-2023-38921
Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgrade_handler function via the firmw…
Impact
Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgrade_handler function via the firmwareRestore and firmwareServerip parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Wg302v2 Firmware | Version 5.2.9 |
| Netgear | Wag302v2 Firmware | Version 5.1.19 |