CVE-2013-10060 – Netgear Router OS Command Injection Vulnerability

CVE ID : CVE-2013-10060

Published : Aug. 1, 2025, 9:15 p.m. | 22 minutes ago

Description : An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN2200B model) firmware versions 1.0.0.36 and prior via the pppoe.cgi endpoint. A remote attacker with valid credentials can execute arbitrary commands via crafted input to the pppoe_username parameter. This flaw allows full compromise of the device and may persist across reboots unless configuration is restored.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…