CVE-2024-23690 – EOL Netgear FVS336v3 Telnet Configuration Backup Command Injection

https://notcve.org/view.php?id=CVE-2024-23690

04 Feb 2025 — The end-of-life Netgear FVS336Gv2 and FVS336Gv3 are affected by a command injection vulnerability in the Telnet interface. An authenticated and remote attacker can execute arbitrary OS commands as root over Telnet by sending crafted "util backup_configuration" commands. • https://vulncheck.com/advisories/netgear-fvs336g-rce • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •