CVE-2013-10060

CVE-2013-10060 is an authenticated OS command injection vulnerability affecting Netgear DGN2200B routers with firmware versions 1.0.0.36 and prior, specifically through the pppoe.cgi endpoint. This flaw allows a remote attacker with valid credentials to execute arbitrary commands, potentially leading to full device compromise that can persist across reboots. Rated with a CVSS score of 7.2 (High), the attack requires high privileges but has low attack complexity and no user interaction, resulting in high impact to confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a Metasploit module exists for exploitation, and the vulnerability has garnered significant community discussion, indicating potential for active exploitation.