NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been exploited in the wild since at least 2017 and specifically by the Shadowserver Foundation on 2025-02-06 UTC.
References
| Link | Resource |
|---|---|
| https://seclists.org/bugtraq/2013/Jun/8 | Mailing List Third Party Advisory |
| https://vulncheck.com/advisories/netgear-dgn | Vendor Advisory |
| https://www.exploit-db.com/exploits/25978 | Exploit Third Party Advisory VDB Entry |
| https://www.exploit-db.com/exploits/43055 | Exploit VDB Entry |
Configurations
Configuration 1 (hide)
| AND |
|
History
20 Nov 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been exploited in the wild since at least 2017 and specifically by the Shadowserver Foundation on 2025-02-06 UTC. |
20 Nov 2025, 16:14
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:netgear:dgn1000_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:netgear:dgn1000:-:*:*:*:*:*:*:* |
|
| First Time |
Netgear dgn1000
Netgear dgn1000 Firmware Netgear |
|
| References | () https://seclists.org/bugtraq/2013/Jun/8 - Mailing List, Third Party Advisory | |
| References | () https://vulncheck.com/advisories/netgear-dgn - Vendor Advisory | |
| References | () https://www.exploit-db.com/exploits/25978 - Exploit, Third Party Advisory, VDB Entry | |
| References | () https://www.exploit-db.com/exploits/43055 - Exploit, VDB Entry |
Information
Published : 2025-01-10 20:15
Updated : 2025-11-20 22:15
NVD link : CVE-2024-12847
Mitre link : CVE-2024-12847
CVE.ORG link : CVE-2024-12847
JSON object : View
Products Affected
netgear
- dgn1000_firmware
- dgn1000