CVE Feed

    Dashboard / CVE / CVE-2024-35517

    CVE-2024-35517

    Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usb_remote_smb_conf.cgi via the share_name parameter.

    Published:Oct 11, 2024
    Last Modified:Mar 13, 2025
    EPS:Oct 11, 2024
    EPSS Score:0.01229
    CVSS Score:8.4

    Affected Products

    Vendor
    Netgear
    Product
    Xr1000
    Vendor
    Netgear
    Product
    Xr1000 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-9215 (CVSS 1.8) — A cross site request forgery (CSRF) vulnerability in the listed NETGEAR models allows an attacker who can leve…
    CVE-2026-11736 (CVSS 1.9) — A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin use…
    CVE-2026-11735 (CVSS 1.9) — A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin …
    CVE-2026-11739 (CVSS 4.9) — A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent att…
    CVE-2026-62657 (CVSS 4.9) — A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Rou…
    CVE-2026-0418 (CVSS 4.3) — Insufficient configuration management in the listed devices allows authenticated administrators connected to t…
    CVE-2026-0417 (CVSS 4.3) — Insufficient input validation vulnerability in the listed NETGEAR devices allows authenticated administrators …
    CVE-2026-9210 (CVSS 4.9) — Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators c…
    CVE-2026-9213 (CVSS 6.9) — A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamp…
    CVE-2026-0410 (CVSS 1.9) — Authenticated administrators connected to the local network can gain elevated access to the router and make u…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High