CVE-2025-28219 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usb_adv.cgi, which allows remote attackers to execute arbitrary commands via parameter…
Critical CVSS: 9.8

CVE-2025-28219

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usb_adv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request.
Vendor
Netgear
Product
Dc112a Firmware
CWE
CWE-78
Yayın Tarihi
2025-03-28 14:15:20
Güncelleme
2025-05-02 15:41:20
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-78 Dc112a Firmware CRITICAL Netgear 2025

Referanslar

https://github.com/IdaJea/IOT_vuln_1/blob/master/DC112A_V1.0.0.64/sub_69600.pdf