Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-23690

EOL Netgear FVS336Gv2 and FVS336Gv3 Telnet Configuration Backup Command Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

The end-of-life Netgear FVS336Gv2 and FVS336Gv3 are affected by a command injection vulnerability in the Telnet interface. An authenticated and remote attacker can execute arbitrary OS commands as root over Telnet by sending crafted "util backup_configuration" commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Netgear FVS336Gv3

Default version status: unaffected

  • 0 to ≤ 4.3.5-3affected

Netgear FVS336Gv2

Default version status: unaffected

  • 0 to ≤ 4.3.3-6affected

References