GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
Bundle

Unauthenticated RCE on Some Netgear WiFi Routers, PSV-2023-0039

Created on 2025-02-10 18:09, updated on 2025-02-10 18:09, by Cédric Bonhomme
JSON
Description

NETGEAR has released fixes for an unauthenticated RCE security vulnerability on the following product models:

  • XR1000 fixed in firmware version 1.0.0.74
  • XR1000v2 fixed in firmware version 1.1.0.22
  • XR500 fixed in firmware version 2.3.2.134

NETGEAR strongly recommends that you download the latest firmware as soon as possible.

Vulnerabilities included in this bundle
Meta
[
  {
    "ref": [
      "https://kb.netgear.com/000066558/Security-Advisory-for-Unauthenticated-RCE-on-Some-WiFi-Routers-PSV-2023-0039"
    ]
  }
]
Combined detection rules

Detection rules are retrieved from Rulezet.

Combined sightings
Sightings 15 total Seen: 15
Author Vulnerability Source Type Date