CVE-2024-12847— NETGEAR DGN setup.cgi OS Command Injection
Quick assessment
Affected
NETGEAR DGN1000
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
NETGEAR DGN1000是美国网件（NETGEAR）公司的一款内置 DSL 调制解调器的 Wireless-N 路由器。 NETGEAR DGN1000 1.1.00.48之前版本存在安全漏洞。攻击者利用该漏洞可以以 root 身份执行任意操作系统命令。
Public Exploits 1
Metasploit · 1
netgear_dgn1000_setup_unauth_exec.rb [exploit]
Possible ATT&CK Techniques 3 AI
T1068 · Exploitation for Privilege Escalation T1546.001 · Change Default File Association T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-12847
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
NETGEAR DGN setup.cgi OS Command Injection
Source: CVE Program / CVE List V5
Vulnerability Description
NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been observed to be exploited in the wild since at least 2017 and specifically by the Shadowserver Foundation on 2025-02-06 UTC.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Vulnerability Title
NETGEAR DGN1000 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NETGEAR DGN1000是美国网件（NETGEAR）公司的一款内置 DSL 调制解调器的 Wireless-N 路由器。 NETGEAR DGN1000 1.1.00.48之前版本存在安全漏洞。攻击者利用该漏洞可以以 root 身份执行任意操作系统命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
II. Public POCs for CVE-2024-12847
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-12847
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-12847 (1)
-
NETGEAR DGN setup.cgi OS Command Execution | VulnCheck Advisories third-party-advisory
Exploits & Public PoCs for CVE-2024-12847 (2)
Mailing List Discussions for CVE-2024-12847 (1)
-
Bugtraq: Unauthenticated command execution on Netgear DGN devices third-party-advisory technical-description
IV. Related Vulnerabilities
Same vendor: NETGEAR
-
CVE-2026-9216
Insufficient input validation vulnerability exists in certai -
CVE-2026-9215
A CSRF vulnerability exists in certain NETGEAR XR series dev -
CVE-2026-9214
Insufficient input validation in NETGEAR R7000 router allows -
CVE-2026-11736
Stack-based buffer overflow vulnerability in some NETGEAR Ni -
CVE-2026-11735
Stack-based buffer overflow vulnerability in some NETGEAR Ni
Same weakness: CWE-78
-
CVE-2026-102911
zosmaai pi-llm-wiki wiki_capture_source MCP tool index.ts os -
CVE-2026-102906
0xshariq github-mcp-server Git Remove MCP Tool github.ts chi -
CVE-2026-102874
HKUDS AnyTool Execute Endpoint main.py subprocess.run os com -
CVE-2026-78229
Linux Image Scanner驱动命令注入漏洞 -
CVE-2026-103056
AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike
V. Comments for CVE-2024-12847
No comments yet