CVE-2024-57231
Published: 05 May 2025
Summary
CVE-2024-57231 is a critical-severity Command Injection (CWE-77) vulnerability in Netgear Rax50 Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 7.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
NETGEAR RAX5 (AX1600 WiFi Router) firmware version V1.0.2.26 contains a command injection vulnerability in the apcli_do_enr_pbc_wps function, where the ifname parameter is processed without adequate sanitization. The flaw is tracked as CVE-2024-57231 with a CVSS v3.1 score of 9.8 and is classified under CWE-77.
An unauthenticated remote attacker can supply a crafted ifname value over the network to execute arbitrary commands on the device, resulting in full compromise of confidentiality, integrity, and availability. The attack requires no user interaction or credentials and can be performed directly against exposed management interfaces.
The associated EPSS score has remained flat at 0.0811 with no material increase since disclosure. The sole public reference is a technical write-up containing proof-of-concept details but no vendor advisory or patch information.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-54453
Vulnerability details
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.