References https://www.anquanke.com/post/id/85125 https://www.kb.cert.org/vuls/id/582384 https://www.hkcert.org/security-bulletin/netgear-routers-command-injection-vulnerability https://kb.netgear.com/000065618/Security-Advisory-for-Post-authentication-Command-Injection-on-Some-Routers-PSV-2022-0350 https://www.sentinelone.com/vulnerability-database/cve-2025-25246/ https://www.cyberdefensemagazine.com/some-versions-of-netgear-routers-remain-vulnerable-to-arbitrary-command-injection/ https://nvd.nist.gov/vuln/detail/CVE-2022-43654 https://www.levelblue.com/blogs/spiderlabs-blog/multiple-vulnerabilities-in-netgear-routers https://flatt.tech/research/posts/finding-bugs-to-trigger-unauthenticated-command-injection-in-a-netgear-router-psv-2022-0044/ https://kb.netgear.com/000049018/Security-Advisory-for-Command-Injection-on-Some-Routers-and-a-Modem-Router-PSV-2017-2158 https://helpcenter.trendmicro.com/en-us/article/tmka-19806 https://www.reddit.com/r/netsec/comments/5hfkc2/netgear_r7000_and_r6400_routers_are_vulnerable_to/ https://nvd.nist.gov/vuln/detail/CVE-2016-6277 https://www.cnvd.org.cn/flaw/show/CNVD-2025-20500 https://kb.netgear.com/zh_CN/000063762/针对某些路由器上的身份验证后命令注入的安全报告-PSV-2018-0564 https://www.icfj.cn/home/posts/260 https://kb.netgear.com/000049354/Security-Advisory-for-Command-Injection-Vulnerability-on-D7000-EX6200v2-and-Some-Routers-PSV-2017-2181 https://www.cnblogs.com/dxmao/articles/17674294.html https://likecells.com/vulnerability?page=28 https://www.redteam.wang/static/downloads/2023hvvday%20POC%E9%9B%86%E5%90%88.pdf
Related VulnerabilitiesNetgear DGN2200 路由器 /RST_status.htm 权限绕过漏洞(CVE-2024-57046)PoCCVE-2016-1555: NETGEAR WNAP320 Access Point Firmware - Remote Command InjectionPoCCVE-2016-5649: NETGEAR DGN2200 / DGND3700 - Admin Password DisclosurePoCCVE-2016-6277: NETGEAR Routers - Remote Code ExecutionPoCCVE-2017-5521: NETGEAR Routers - Authentication BypassPoCCVE-2020-26919: NETGEAR ProSAFE Plus - Unauthenticated Remote Code ExecutionPoCCVE-2020-27866: NETGEAR - Authentication BypassPoCCVE-2021-20167: Netgear RAX43 1.0.3.96 - Command Injection/Authentication Bypass Buffer OverrunPoCCVE-2022-29383: NETGEAR ProSafe SSL VPN firmware - SQL InjectionPoCCVE-2024-30568: Netgear R6850 V1.1.0.88 - Command InjectionPoCCVE-2024-30569: Netgear R6850 - Information DisclosurePoCCVE-2024-30570: Netgear R6850 - Information DisclosurePoCCVE-2024-57046: Netgear DGN2200 - Improper Authentication