High severity · published Jun 6, 2023
CVE-2023-33533
Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are vulnerable…
8.8
CVSS
3.1%
EPSS
No
On KEV
Description
Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are vulnerable to Command Injection. If an attacker gains web management privileges, they can inject commands into the post request parameters, gaining shell privileges.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DF
D6220 Firmware · Netgear
1.0.0.80 · source: NVD
DF
D8500 Firmware · Netgear
1.0.3.60 · source: NVD
RF
R6700 Firmware · Netgear
1.0.2.26 · source: NVD
RF
R6900 Firmware · Netgear
1.0.2.26 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-33533
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-33533
Exploit
https://github.com/D2y6p/CVE/blob/main/Netgear/CVE-2023-33533/Netgear_RCE.pdf
Vendor Advisory
https://www.netgear.com/about/security/
More from D6220 Firmware
8.8
CVE-2016-6277
NETGEAR Multiple Routers Remote Code Execution Vulnerability
8.1
CVE-2017-5521
NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
9.8
CVE-2021-45638
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker
9.8
CVE-2021-45610
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker
9.8
CVE-2021-45527
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user