{"id":"CVE-2024-23690","title":"EOL Netgear FVS336Gv2 and FVS336Gv3 Telnet Configuration Backup Command Injection","summary":"The end-of-life Netgear FVS336Gv2 and FVS336Gv3 are affected by a command injection vulnerability in the Telnet interface. An authenticated and remote attacker can execute arbitrary OS commands as root over Telnet by sending crafted \"uti…","severity":"high","cvss":7.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-78"],"vendor":"Netgear","product":"FVS336Gv3","affected":["FVS336Gv3 <= 4.3.5-3","FVS336Gv2 <= 4.3.3-6"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2025-02-04T14:58:11.357988Z"},"published":"2025-02-04","updated":"2026-10-29","sourceUpdated":"2026-10-29T21:15:05.111Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-23690","references":[{"url":"https://vulncheck.com/advisories/netgear-fvs336g-rce"}],"tags":["cve.org"],"epss":0.01129,"epssPercentile":0.66569,"ingestedAt":"2026-11-03T08:39:35.533Z","slug":"CVE-2024-23690","body":"## Overview\n\nThe end-of-life Netgear FVS336Gv2 and FVS336Gv3 are affected by a command injection vulnerability in the Telnet interface. An authenticated and remote attacker can execute arbitrary OS commands as root over Telnet by sending crafted \"util backup_configuration\" commands.\n\n## Affected\n\n- `FVS336Gv3 <= 4.3.5-3`\n- `FVS336Gv2 <= 4.3.3-6`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":39.6,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}