CVE-2024-57046
Published: 18 February 2025
Summary
CVE-2024-57046 is a high-severity Improper Authentication (CWE-287) vulnerability in Netgear Dgn2200 Firmware. Its CVSS base score is 8.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 2.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 AC-14 (Permitted Actions Without Identification or Authentication) and AC-3 (Access Enforcement).
Deeper analysis
CVE-2024-57046 is an authentication bypass vulnerability affecting the Netgear DGN2200 router running firmware version v1.0.0.46 and earlier. The flaw, classified under CWE-287, allows requests that append the parameter "?x=1.gif" to any URL to be treated as authenticated, bypassing normal access controls on the device.
An attacker with adjacent network access can exploit the issue without credentials or user interaction to obtain full administrative control, resulting in impacts to confidentiality, integrity, and availability. The CVSS 3.1 score of 8.8 reflects the high severity of remote code execution or configuration changes that become possible once authentication is evaded.
Public references include a detailed report on GitHub and Netgear's security advisory page, though specific patch or mitigation guidance is not enumerated in the available details. The EPSS score reached a peak of 0.6243 with a current value of 0.5027.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-4658
Vulnerability details
A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authentication. When adding "?x=1.gif" to the the requested url, it will be recognized as passing the authentication.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The CVE describes an authentication bypass vulnerability in the Netgear DGN2200 router's web management interface via a URL parameter (?x=1.gif), enabling exploitation of a public-facing application to gain unauthorized administrative access.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Explicitly defines and limits actions permitted without identification or authentication, directly preventing the router from treating crafted URLs like '?x=1.gif' as authenticated.
Enforces approved access authorizations, blocking unauthorized access to router administrative functions despite the authentication bypass vulnerability.
Mandates identification, reporting, and correction of flaws such as this CVE through firmware updates to eliminate the authentication bypass.