CVE-2024-30568 PoC — NETGEAR R6850 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30568.yaml

Associated Vulnerability

Title:NETGEAR R6850 安全漏洞 (CVE-2024-30568)
Description:NETGEAR R6850是美国网件（NETGEAR）公司的一款无线路由器。 NETGEAR R6850 1.1.0.88版本存在安全漏洞，该漏洞源于c4-IPAddr参数存在命令注入漏洞。

Description

Netgear R6850 router firmware version V1.1.0.88 suffers from a command injection vulnerability in the ping_test functionality. An unauthenticated attacker can inject arbitrary system commands through the c4_IPAddr parameter, resulting in remote code execution as root.

File Snapshot


 id: CVE-2024-30568

info:
  name: Netgear R6850 V1.1.0.88 - Command Injection
  author: ritikchaddha

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!