CVE-2023-38921: NETGEAR WAG302V2 Firmware

High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgrade_handler function via the firmwareRestore and firmwareServerip parameters.

Affected products

• NETGEAR WAG302V2 Firmware: version 5.1.19 only
• NETGEAR WG302V2 Firmware: version 5.2.9 only

Published 2023-08-07. Last modified 2026-06-17.