CyberRota Analysis
AI-GeneratedA critical vulnerability exists in the Web Management Interface of the Netcore NBR200V2 router, specifically in the eval function of the /www/cgi-bin/network_tools file, allowing for remote OS command injection via manipulation of the QUERY_STRING argument. This flaw poses a severe risk as it can be exploited by attackers to execute arbitrary commands on the affected device. Organizations using this router model should prioritize immediate remediation efforts, given the public availability of the exploit and the lack of vendor response.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/network_tools of the component Web Management Interface. Such manipulation of the argument QUERY_STRING leads to os command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.