CVE Feed

    Dashboard / CVE / CVE-2024-30572

    CVE-2024-30572

    Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the ntp_server parameter.

    Published:Apr 3, 2024
    Last Modified:Apr 4, 2025
    EPS:Apr 3, 2024
    EPSS Score:0.00991
    CVSS Score:8

    Affected Products

    Vendor
    Netgear
    Product
    R6850
    Vendor
    Netgear
    Product
    R6850 Firmware

    Exploits

    https://github.com/funny-mud-peee/IoT-vuls/blob/main/netgear%20R6850/Netgear-R6850%20V1.1.0.88%20Command%20Injection%28ntp_server%29.mdhttps://github.com/funny-mud-peee/IoT-vuls/blob/main/netgear%20R6850/Netgear-R6850%20V1.1.0.88%20Command%20Injection%28ntp_server%29.md

    Related CVEs

    CVE-2025-12942 (CVSS 4.8) — Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers co…
    CVE-2024-30570 (CVSS 5.3) — An information leak in debuginfo.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive informati…
    CVE-2024-30569 (CVSS 7.5) — An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive info…
    CVE-2024-30571 (CVSS 7.5) — An information leak in the BRS_top.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensit…
    CVE-2024-30568 (CVSS 9.8) — Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerability via the c4-IPAddr parameter…
    CVE-2021-34865 (CVSS 8.8) — This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of mul…
    CVE-2021-45501 (CVSS 9.4) — Certain NETGEAR devices are affected by authentication bypass. This affects AC2400 before 1.1.0.84, AC2600 bef…
    CVE-2021-45511 (CVSS 6.8) — Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 b…
    CVE-2021-45534 (CVSS 7.8) — Certain NETGEAR devices are affected by command injection by an authenticated user. This affects AC2100 before…
    CVE-2021-45644 (CVSS 6.8) — Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 befo…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High