CVE-2024-12847

NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been observed to be exploited in the wild since at least 2017 and specifically by the Shadowserver Foundation on 2025-02-06 UTC.

• CWE-78
• CWE-306
• CWE-306

• https://seclists.org/bugtraq/2013/Jun/8Mailing List, Third Party Advisory
• https://vulncheck.com/advisories/netgear-dgnVendor Advisory
• https://www.exploit-db.com/exploits/25978Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/43055Exploit, VDB Entry

Published

Jan 10, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-12841A vulnerability was found in Emlog Pro up to 2.4.1. It has b…6.1
• CVE-2024-12842A vulnerability was found in Emlog Pro up to 2.4.1. It has b…6.1
• CVE-2024-12843A vulnerability was found in Emlog Pro up to 2.4.1. It has b…6.1
• CVE-2024-12844A vulnerability classified as problematic has been found in …6.1
• CVE-2024-12845A vulnerability classified as problematic was found in Emlog…6.1
• CVE-2024-12846A vulnerability, which was classified as problematic, has be…4.8
• CVE-2024-12848The SKT Page Builder plugin for WordPress is vulnerable to a…8.8
• CVE-2024-12849The Error Log Viewer By WP Guru plugin for WordPress is vuln…7.5
• CVE-2024-1285The Page Builder Sandwich – Front End WordPress Page Builder…6.5
• CVE-2024-12850The Database Backup and check Tables Automated With Schedule…4.9
• CVE-2024-12851The Element Pack Elementor Addons (Header Footer, Template L…5.4
• CVE-2024-12852The Happy Addons for Elementor plugin for WordPress is vulne…5.4