Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-35522

Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injection in operating_mode.cgi via the ap_mode parameter with ap_24g_manual set to 1 and ap_24g_manual_sec set to NotNone.

Published

2024-10-11T22:15:04.117

Last Modified

2025-03-13T17:15:32.013

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.4 (HIGH)

Weaknesses
  • Type: Primary
    CWE-77
  • Type: Secondary
    CWE-77
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System netgear ex3700_firmware < 1.0.0.98 Yes
Hardware netgear ex3700 - No
References