- Description
- NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been exploited in the wild since at least 2017.
- Source
- disclosure@vulncheck.com
- NVD status
- Received
CVSS 3.1
- Type
- Secondary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
- disclosure@vulncheck.com
- CWE-288
- Hype score
- Not currently trending
NØØT Security Alerts Classification: High CVE: CVE-2024-12847 Product: NETGEAR / DGN1000 Summary: VulnCheck reports real-world exploitation activity affecting NETGEAR / DGN1000. Evidence: Active exploitation reported; Severe impact class; Live exploitation observed by
@Python_s_
2 Oct 2026
41 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 In this week’s newsletter, we cover CVE-2024-12847, a critical RCE vulnerability affecting NETGEAR DGN1000 routers that has become the most-attacked flaw tracked by the CrowdSec Network. We break down how attackers are exploiting this decade-old vulnerability to take over
@Crowd_Security
17 Aug 2026
669 Impressions
1 Retweet
5 Likes
0 Bookmarks
0 Replies
0 Quotes
#Vulnerability #CVE202412847 CVE-2024-12847 (CVSS 9.8): NETGEAR Router Flaw Exploited in the Wild for Years, PoC Published https://t.co/HgUqOfHaL8
@Komodosec
2 Feb 2025
61 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
#exploit 1. CVE-2024-12847: Exposing an Old Netgear Vulnerability Still Active in 2025 - https://t.co/qRmuxKaxqT 2. RCE in Lightning AI-development platform - https://t.co/dyiZO28pin 3. CVE-2024-41710: Mitel phones Argument Injection - https://t.co/Qv6bpjmKWk 3.… https://t.co
@ksg93rd
31 Jan 2025
189 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
Threat Alert: CVE-2024-12847 (CVSS 9.8): NETGEAR Router Flaw Exploited in the Wild for Years, CVE-2024-12847 Severity: 🔴 High Maturity: 💢 Emerging Learn more: https://t.co/XuV5R3W9Ro #CyberSecurity #ThreatIntel #InfoSec
@fletch_ai
14 Jan 2025
16 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
A critical vulnerability (CVE-2024-12847) in Netgear routers has been exploited since 2017, allowing unauthorized access. Update released for DGN1000; DGN2200 v1 no longer supported. ⚠️ #Netgear #RouterFlaw #USA #CybersecurityNews link: https://t.co/u0hUUxnohk https://t.co/RGDGx
@TweetThreatNews
13 Jan 2025
49 Impressions
1 Retweet
0 Likes
0 Bookmarks
0 Replies
0 Quotes
NETGEAR Router Flaw Exploited (CVE-2024-12847) PoC Published 🧛: Shed some light here, cmon men ExploitDB lho wkwk. https://t.co/7azebwIXTf
@byt3n33dl3
13 Jan 2025
36 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
🚨Alert🚨 CVE-2024-12847: Authentication Bypass in NETGEAR DGN1000 📊 327K+ Services are found on https://t.co/ysWb28BTvF yearly. 🔗Hunter Link:https://t.co/s24w5PItAc 👇Query HUNTER :/product.name="NETGEAR DGN1000" FOFA : product="NETGEAR-DGN1000" SHODAN : product:"NETGEAR… http
@HunterMapping
13 Jan 2025
1720 Impressions
6 Retweets
19 Likes
6 Bookmarks
0 Replies
2 Quotes
NETGEAR Router Flaw Exploited for Years (CVE-2024-12847 ) PoC Published : https://t.co/oXMxqCrsmU
@binitamshah
12 Jan 2025
11376 Impressions
25 Retweets
93 Likes
38 Bookmarks
2 Replies
2 Quotes
ネットギア社ルータの重大(Critical)な脆弱性CVE-2024-12847が開示された。CVSSスコア9.8で、少なくとも2017年から実際に悪用されているもの。DGN1000及びDGN2000 v1の組込Webサーバにおけるコマンドインジェクション。他の機種への影響は未確定。Metasploitモジュールあり。 https://t.co/WiVRlizZLy
@__kokumoto
12 Jan 2025
1962 Impressions
15 Retweets
23 Likes
7 Bookmarks
0 Replies
0 Quotes
CVE-2024-12847 (CVSS 9.8): NETGEAR Router Flaw Exploited in the Wild for Years now. PoC Published (not from me) Why do I now do a-lot of NetExec stuff . . . (Im scared) ☠️
@byt3n33dl3
12 Jan 2025
30 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-12847 Authentication Bypass in NETGEAR DGN1000 - Exploited Since 2017 ... https://t.co/UFvushfwaz Customizable Vulnerability Alerts: https://t.co/U7998fz7yk
@VulmonFeeds
11 Jan 2025
60 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-12847: Proof-of-Concept Exploit Code Released #CVE-2024-12847 #NetGear #PoCExploitCode https://t.co/swkYr00LeM
@pravin_karthik
11 Jan 2025
17 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-12847 (CVSS 9.8): NETGEAR Router Flaw Exploited in the Wild for Years, PoC Published https://t.co/p5HvfEYG9L
@Dinosn
11 Jan 2025
4670 Impressions
34 Retweets
90 Likes
27 Bookmarks
0 Replies
1 Quote
[CVE-2024-12847: CRITICAL] Critical security alert: NETGEAR DGN1000 <1.1.00.48 exposed to authentication bypass flaw! Attackers can execute commands remotely, compromising network security. Update now!#cybersecurity,#vulnerability https://t.co/V7YYV5qQ4i https://t.co/7bJLLg5Xu
@CveFindCom
10 Jan 2025
20 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-12847 NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system… https://t.co/lliFULMNoM
@CVEnew
10 Jan 2025
394 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes