CVE-2019-17049

CVE-2019-17049 describes a SQL Injection vulnerability affecting NETGEAR SRX5308 devices running firmware version 4.3.5-3. This flaw allows an unauthenticated attacker to inject malicious SQL queries, as demonstrated by in-the-wild exploitation in September 2019 to create new user accounts. With a CVSS score of 7.5 (HIGH), this vulnerability is easily exploitable over the network with low attack complexity, leading to high integrity impact without requiring user interaction. While exploited in the wild, there is no public exploit code available in common repositories like Metasploit or ExploitDB, and it has received minimal community discussion or media coverage.