CVE-2023-33532: NETGEAR r6250 Firmware

Critical severity, CVSS 9.8. EPSS: 16.2% chance of exploitation in the next 30 days.

There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management privileges, they can inject commands into the post request parameters, thereby gaining shell privileges.

Affected products

• NETGEAR r6250 Firmware: version 1.0.4.48 only

Published 2023-06-06. Last modified 2026-07-09.