CVE-2024-57232
Published: 05 May 2025
Summary
CVE-2024-57232 is a critical-severity Command Injection (CWE-77) vulnerability in Netgear Rax50 Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 7.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
NETGEAR RAX5 (AX1600 WiFi Router) firmware version 1.0.2.26 contains a command injection vulnerability tracked as CVE-2024-57232. The flaw is present in the apcli_wps_gen_pincode function, where the ifname parameter is processed without adequate sanitization, corresponding to CWE-77. The issue received a CVSS 3.1 base score of 9.8, reflecting network-accessible attack vectors with low complexity and no required privileges or user interaction.
An unauthenticated remote attacker can supply a crafted ifname value to the affected function and execute arbitrary operating-system commands on the device. Successful exploitation grants the attacker full control over confidentiality, integrity, and availability of the router, enabling actions such as configuration changes, traffic interception, or persistence mechanisms.
The single reference provided is a public vulnerability disclosure repository entry and contains no vendor advisory, patch information, or mitigation guidance. The associated EPSS score remains flat at 0.0811 with no recorded rise since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-13460
Vulnerability details
NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.