CVE-2013-10061
Netgear Routers setup.cgi RCE
- State
- Published
- Severity
- 8.6 High
- Published
- Aug 1, 2025
- Updated
- Apr 7, 2026
- Reserved
- Aug 1, 2025
Description
An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN1000B model firmware versions 1.1.00.24 and 1.1.00.45) via the TimeToLive parameter in the setup.cgi endpoint. The vulnerability arises from improper input neutralization, enabling command injection through crafted POST requests. This flaw enables remote attackers to deploy payloads or manipulate system state post-authentication.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.6 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
Weaknesses
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected Products
| Product | Versions |
|---|---|
DGN1000BNetgear |
|
References
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/netgear_dgn1000b_setup_exec.rbexploit
- https://www.exploit-db.com/exploits/24464exploit
- https://www.exploit-db.com/exploits/24931exploit
- https://web.archive.org/web/20150218074318/http://www.s3cur1ty.de/m1adv2013-005technical-descriptionexploit
- https://www.vulncheck.com/advisories/netgear-legacy-routers-rce-2third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.