CVE-2023-33533 Command injection in n/a
Authenticated attackers can inject commands into web management parameters to gain shell privileges on affected Netgear routers.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-33533?
CVE-2023-33533 is a high-severity command injection vulnerability in Netgear D6220 Firmware, published on 6 Jun 2023. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are vulnerable to Command Injection. If an attacker gains web management privileges, they can inject commands into the post request parameters, gaining shell privileges.
Weakness: CWE-77
Which versions are affected by CVE-2023-33533?
It affects 4 products.
Products include Netgear D6220 Firmware, Netgear D8500 Firmware, Netgear R6700 Firmware, Netgear R6900 Firmware.
How do I fix CVE-2023-33533?
No fix has been published for CVE-2023-33533 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2023-33533 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-33533 exists.
Other vulnerabilities in Netgear D6220 Firmware
Sources
Also known as GHSA-6hv6-62gq-jmq6.