Description
NETGEAR WNR2000v4存在命令注入漏洞，该漏洞是由于currentsetting.htm接口对用户的请求验证不当导致的。
NETGEAR WNR2000v4 CVE-2023-50089 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-50089
https://github.com/advisories/GHSA-46jg-h552-883r
https://access.redhat.com/security/cve/cve-2023-50089
https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2023-50089
https://www.netgear.com/about/security/
https://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability
https://vulmon.com/searchpage?q=netgear+wnr2000+firmware