CVE-2013-10061 is an authenticated OS command injection vulnerability affecting Netgear DGN1000B routers (firmware versions 1.1.00.24 and 1.1.00.45). This flaw, stemming from improper input neutralization in the TimeToLive parameter of the setup.cgi endpoint, allows remote attackers to execute arbitrary commands after authentication. Rated High severity (CVSS 7.2), it enables full compromise of confidentiality, integrity, and availability. While not on the KEV catalog, a Metasploit module exists, and it has significant community discussion, indicating active interest and potential for exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.1.00.24CPE matchmatch criteria | cpe:2.3:o:netgear:dgn1000b_firmware:1.1.00.24:*:*:*:*:*:*:* | ||
1.1.00.45CPE matchmatch criteria | cpe:2.3:o:netgear:dgn1000b_firmware:1.1.00.45:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.3 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.