CVE-2024-57046

HIGHNuclei

NETGEAR dgn2200_firmware Improper Authentication

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2024-57046 has a selected CVSS score of 8.8 (high); EIP currently links 1 Nuclei template.

Description

A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authentication. When adding "?x=1.gif" to the the requested url, it will be recognized as passing the authentication.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Apr 12, 2026 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 19, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

dgn2200_firmware

Browse NETGEAR / dgn2200_firmware
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryHIGHNetgear DGN2200 - Improper AuthenticationCVSS 8.8

A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authentication. When adding "?x=1.gif" to the requested url, it will be recognized as passing the authentication.

Impact

Attackers on the local network can bypass authentication by appending '?x=1.gif' to URLs, gaining unauthorized access to administrative functions and router configuration.

Remediation

Update Netgear DGN2200 router to firmware version later than v1.0.0.46 that addresses the authentication bypass vulnerability.

WeaknessesCWE-287
Authorsritikchaddha
Template tagscvecve2024netgearrouterauth-bypassdgn2200vulnvkev
CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Shodan: http.title:"DGN2200"
FOFA: title="NETGEAR DGN2200"
https://github.com/Shuanunio/CVE_Requests/blob/main/Netgear/DGN2200/ACL%20bypass%20Vulnerability%20in%20Netgear%20DGN2200.md https://www.netgear.com/about/security/ https://nvd.nist.gov/vuln/detail/CVE-2024-57046

Source: ProjectDiscovery

References

3