Details of VAR-202306-0607

ID

VAR-202306-0607

CVE

CVE-2023-33533

TITLE

Netgear Router Command injection vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-202306-373

DESCRIPTION

Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are vulnerable to Command Injection. If an attacker gains web management privileges, they can inject commands into the post request parameters, gaining shell privileges

Trust: 0.99

sources: NVD: CVE-2023-33533 // VULMON: CVE-2023-33533

AFFECTED PRODUCTS

vendor:	netgear	model:	r6900	scope:	eq	version:	1.0.2.26	Trust: 1.0
vendor:	netgear	model:	r6700	scope:	eq	version:	1.0.2.26	Trust: 1.0
vendor:	netgear	model:	d8500	scope:	eq	version:	1.0.3.60	Trust: 1.0
vendor:	netgear	model:	d6220	scope:	eq	version:	1.0.0.80	Trust: 1.0

sources: NVD: CVE-2023-33533

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2023-33533
value:	HIGH
Trust: 1.0
134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2023-33533
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-202306-373
value:	HIGH
Trust: 0.6

nvd@nist.gov:	CVE-2023-33533
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.1
Trust: 2.0

sources: CNNVD: CNNVD-202306-373 // NVD: CVE-2023-33533 // NVD: CVE-2023-33533

PROBLEMTYPE DATA

problemtype:

CWE-77

Trust: 1.0

sources: NVD: CVE-2023-33533

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202306-373

TYPE

command injection

Trust: 0.6

sources: CNNVD: CNNVD-202306-373

PATCH

title:

Netgear Router Fixes for command injection vulnerabilities

url:

http://123.124.177.30/web/xxk/bdxqById.tag?id=241763

Trust: 0.6

sources: CNNVD: CNNVD-202306-373

EXTERNAL IDS

db:	NVD	id:	CVE-2023-33533	Trust: 1.7
db:	CNNVD	id:	CNNVD-202306-373	Trust: 0.6
db:	VULMON	id:	CVE-2023-33533	Trust: 0.1

sources: VULMON: CVE-2023-33533 // CNNVD: CNNVD-202306-373 // NVD: CVE-2023-33533

REFERENCES

url:	https://github.com/d2y6p/cve/blob/main/netgear/cve-2023-33533/netgear_rce.pdf	Trust: 1.7
url:	https://www.netgear.com/about/security/	Trust: 1.7
url:	https://cxsecurity.com/cveshow/cve-2023-33533/	Trust: 0.6
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULMON: CVE-2023-33533 // CNNVD: CNNVD-202306-373 // NVD: CVE-2023-33533

SOURCES

db:	VULMON	id:	CVE-2023-33533
db:	CNNVD	id:	CNNVD-202306-373
db:	NVD	id:	CVE-2023-33533

LAST UPDATE DATE

2025-01-08T23:11:08.330000+00:00

SOURCES UPDATE DATE

db:	VULMON	id:	CVE-2023-33533	date:	2023-06-06T00:00:00
db:	CNNVD	id:	CNNVD-202306-373	date:	2023-06-15T00:00:00
db:	NVD	id:	CVE-2023-33533	date:	2025-01-08T16:15:30.463

SOURCES RELEASE DATE

db:	VULMON	id:	CVE-2023-33533	date:	2023-06-06T00:00:00
db:	CNNVD	id:	CNNVD-202306-373	date:	2023-06-06T00:00:00
db:	NVD	id:	CVE-2023-33533	date:	2023-06-06T14:15:12.817