CVE-2024-57229
Published: 05 May 2025
Summary
CVE-2024-57229 is a critical-severity Command Injection (CWE-77) vulnerability in Netgear Rax50 Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 7.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
The vulnerability CVE-2024-57229 is a command injection flaw (CWE-77) in the NETGEAR RAX5 AX1600 WiFi Router on firmware version V1.0.2.26. It resides in the reset_wifi function, where the devname parameter is passed to system commands without adequate sanitization.
An unauthenticated attacker with network access can supply malicious input via the devname parameter in a crafted request to the affected function. Successful exploitation allows arbitrary command execution on the device, resulting in full control over confidentiality, integrity, and availability as indicated by the CVSS 9.8 rating.
The issue was disclosed via a public technical write-up on GitHub containing reproduction details. No vendor advisory, firmware update, or mitigation guidance is referenced in available sources. The EPSS score remains steady at 0.0811 with no material rise observed after publication.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-54454
Vulnerability details
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.