CVE-2023-38928

CriticalCVSS 9.8

Published: 07/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.27%

66th percentile - higher than 66% of all known CVEs

Summary

A command injection vulnerability was discovered in Netgear R7100LG version 1.0.0.78 via the password parameter at usb_remote_invite.cgi.

Risk Assessment

Exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the device, posing a serious security risk to the network.

Recommendation

It is recommended to update the device firmware to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Netgear R7100LG 1.0.0.78 was discovered to contain a command injection vulnerability via the password parameter at usb_remote_invite.cgi.