CVE-2013-10061— Netgear Routers setup.cgi RCE
Public Exploits 1
Metasploit · 1 netgear_dgn1000b_setup_exec.rb [exploit]
Possible ATT&CK Techniques 1AI
T1059 · Command and Scripting InterpreterGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2013-10061
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Netgear Routers setup.cgi RCE
Source: CVE Program / CVE List V5
Vulnerability Description
An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN1000B model firmware versions 1.1.00.24 and 1.1.00.45) via the TimeToLive parameter in the setup.cgi endpoint. The vulnerability arises from improper input neutralization, enabling command injection through crafted POST requests. This flaw enables remote attackers to deploy payloads or manipulate system state post-authentication.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Vulnerability Title
Netgear DGN1000B 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Netgear DGN1000B是美国网件（Netgear）公司的一款无线路由器。 Netgear DGN1000B 1.1.00.24版本和1.1.00.45版本存在安全漏洞，该漏洞源于setup.cgi端点输入清理不足，可能导致远程代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
II. Public POCs for CVE-2013-10061
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-10061
请登录查看更多情报信息。
Same Patch Batch · Netgear · 2025-08-01 · 3 CVEs total
| CVE-2013-10063 | Netgear SPH200D <= 1.0.4.80 Path Traversal via HTTP GET | |
| CVE-2013-10060 | Netgear Routers pppoe.cgi RCE |
IV. Related Vulnerabilities
Same vendor: Netgear
- CVE-2026-9214
Insufficient input validation in NETGEAR R7000 router allows - CVE-2026-11736
Stack-based buffer overflow vulnerability in some NETGEAR Ni - CVE-2026-11735
Stack-based buffer overflow vulnerability in some NETGEAR Ni - CVE-2026-11738
Insufficient input validation in certain NETGEAR Nighthawk r - CVE-2026-11739
Command injection vulnerability in some NETGEAR Nighthawk de
Same weakness: CWE-78
- CVE-2026-68939
Pyenv: Glob/wildcard metacharacters bypass is_version_safe() - CVE-2026-75094
COMFAST CF-N1-S CGI mbox-config sub_44B438 os command inject - CVE-2026-71858
Notepad++: shortcuts.xml Macro HMAC Bypass Enables Condition - CVE-2026-71472
Acm-search-v2-rhel9: search-v2-operator: shell-command and s - CVE-2026-68519
Glances: `--disable-config-exec` does not cover on-alert act
V. Comments for CVE-2013-10061
No comments yet