CyberRota Analysis
AI-GeneratedA critical command injection vulnerability exists in the Firmware Upgrade CGI Endpoint of the Netcore NBR200V2 device, allowing remote attackers to manipulate the QUERY_STRING argument. This flaw could lead to unauthorized command execution, posing significant risks to the integrity and security of the affected system. Organizations using this device should prioritize immediate remediation efforts, given the availability of public exploits and the lack of vendor response.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This vulnerability affects unknown code of the file /www/cgi-bin/upgrade of the component Firmware Upgrade CGI Endpoint. Such manipulation of the argument QUERY_STRING leads to command injection. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.