CVE-2023-33532

9.8 criticalEPSS 16%

Critical (9.8) in netgear r6250 firmware. EPSS 16% chance of exploitation in the next 30 days.

There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management privileges, they can inject commands into the post request parameters, thereby gaining shell privileges.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2023-06-06
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

netgear:r6250_firmware

References

https://github.com/D2y6p/CVE/blob/main/Netgear/CVE-2023-33532/Netgear_R6250_RCE.pdf
https://github.com/D2y6p/CVE/blob/main/Netgear/CVE-2023-33532/Netgear_R6250_RCE.pdf

Check your stack JSON