NVD disclosure day

Published threat advisories for June 6, 2023

CVE advisoryCRITICAL

CVE-2023-33532

Netgear R6250 Command Injection Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A command injection vulnerability exists in Netgear R6250 routers, potentially allowing an attacker with web management privileges to gain shell access and execute arbitrary commands. This issue could enable an attacker to gain control of the device if the web management interface is reachable.

NVD published:

CVE advisoryCRITICAL

CVE-2023-31569

TOTOLINK X5000R Command Injection Vulnerability

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A command injection vulnerability exists in TOTOLINK X5000R router firmware via the setWanCfg function, allowing unauthenticated attackers to execute arbitrary commands. This could lead to a complete compromise of the router and impact network traffic it manages. It is important to confirm if this product and firmware

NVD published: