Vulnerability Description
Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operating_mode.cgi via the ap_mode parameter.
CVSS Score
8.4
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Ex3700 Firmware | <= 1.0.0.96 |
| Netgear | Ex3700 | - |
| Netgear | Ex6100 Firmware | <= 1.0.2.28 |
| Netgear | Ex6100 | - |
| Netgear | Ex6120 Firmware | <= 1.0.0.68 |
| Netgear | Ex6120 | - |
Related Weaknesses (CWE)
References
- https://github.com/consrc/cves/blob/main/CVE-2024-35519.mdThird Party Advisory
FAQ
What is CVE-2024-35519?
CVE-2024-35519 is a vulnerability with a CVSS score of 8.4 (HIGH). Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operating_mode.cgi via the ap_mode parameter.
How severe is CVE-2024-35519?
CVE-2024-35519 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-35519?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear Ex3700 Firmware, Netgear Ex3700, Netgear Ex6100 Firmware, Netgear Ex6100, Netgear Ex6120 Firmware.