CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2024-35519: Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operating_mode.cgi via the...
8.4
CVSS
Description
Netgear EX6120 v1.0.0.68, Netgear EX6100 v1.0.2.28, and Netgear EX3700 v1.0.0.96 are vulnerable to command injection in operating_mode.cgi via the ap_mode parameter.
Classification
CVE ID: CVE-2024-35519
CVSS Base Severity: HIGH
CVSS Base Score: 8.4
CVSS Vector: CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:C/UI:N
Affected Products
Vendor: n/a
Product: n/a
Exploit Prediction Scoring System (EPSS)
EPSS Score: 1.24% (probability of being exploited)
EPSS Percentile: 78.11% (scored less or equal to compared to others)
EPSS Date: 2025-04-15 (when was this score calculated)
Stakeholder-Specific Vulnerability Categorization (SSVC)
SSVC Exploitation: none
SSVC Technical Impact: total
SSVC Automatable: false
References
https://nvd.nist.gov/vuln/detail/CVE-2024-35519https://github.com/consrc/cves/blob/main/CVE-2024-35519.md