Sign-up

ID

VAR-202403-1283


CVE

CVE-2023-50677


TITLE

of netgear  DGND4000  Privilege management vulnerability in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2023-029361

DESCRIPTION

An issue in NETGEAR-DGND4000 v.1.1.00.15_1.00.15 allows a remote attacker to escalate privileges via the next_file parameter to the /setup.cgi component. of netgear DGND4000 Firmware contains a privilege management vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. ‌ NETGEAR DGND4000 is a wireless router with modem functionality. No detailed vulnerability details are available at this time

Trust: 2.16

sources: NVD: CVE-2023-50677 // JVNDB: JVNDB-2023-029361 // CNVD: CNVD-2025-13433

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2025-13433

AFFECTED PRODUCTS

vendor:netgearmodel:dgnd4000scope:eqversion:1.1.00.15

Trust: 1.0

vendor:ネットギアmodel:dgnd4000scope:eqversion: -

Trust: 0.8

vendor:ネットギアmodel:dgnd4000scope:eqversion:dgnd4000 firmware 1.1.00.15

Trust: 0.8

vendor:ネットギアmodel:dgnd4000scope: - version: -

Trust: 0.8

vendor:netgearmodel:dgnd4000 1.1.00.15 1.00.15scope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2025-13433 // JVNDB: JVNDB-2023-029361 // NVD: CVE-2023-50677

CVSS

SEVERITY

CVSSV2

CVSSV3

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2023-50677
value: HIGH

Trust: 1.0

OTHER: JVNDB-2023-029361
value: HIGH

Trust: 0.8

CNVD: CNVD-2025-13433
value: HIGH

Trust: 0.6

CNVD: CNVD-2025-13433
severity: HIGH
baseScore: 8.3
vectorString: AV:A/AC:L/AU:N/C:C/I:C/A:C
accessVector: ADJACENT_NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 6.5
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2023-50677
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: ADJACENT
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.1

Trust: 1.0

OTHER: JVNDB-2023-029361
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: ADJACENT NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: CNVD: CNVD-2025-13433 // JVNDB: JVNDB-2023-029361 // NVD: CVE-2023-50677

PROBLEMTYPE DATA

problemtype:CWE-269

Trust: 1.0

problemtype:Improper authority management (CWE-269) [ others ]

Trust: 0.8

sources: JVNDB: JVNDB-2023-029361 // NVD: CVE-2023-50677

EXTERNAL IDS

db:NVDid:CVE-2023-50677

Trust: 3.2

db:JVNDBid:JVNDB-2023-029361

Trust: 0.8

db:CNVDid:CNVD-2025-13433

Trust: 0.6

sources: CNVD: CNVD-2025-13433 // JVNDB: JVNDB-2023-029361 // NVD: CVE-2023-50677

REFERENCES

url:https://nvd.nist.gov/vuln/detail/cve-2023-50677

Trust: 1.4

url:https://gist.github.com/dmind-nll/b61b8d8d20271adf60fc717b3b48faff

Trust: 1.0

sources: CNVD: CNVD-2025-13433 // JVNDB: JVNDB-2023-029361 // NVD: CVE-2023-50677

SOURCES

db:CNVDid:CNVD-2025-13433
db:JVNDBid:JVNDB-2023-029361
db:NVDid:CVE-2023-50677

LAST UPDATE DATE

2025-08-02T23:16:48.358000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2025-13433date:2025-06-25T00:00:00
db:JVNDBid:JVNDB-2023-029361date:2025-07-30T09:13:00
db:NVDid:CVE-2023-50677date:2025-07-28T17:04:36.903

SOURCES RELEASE DATE

db:CNVDid:CNVD-2025-13433date:2025-06-25T00:00:00
db:JVNDBid:JVNDB-2023-029361date:2025-07-30T00:00:00
db:NVDid:CVE-2023-50677date:2024-03-14T22:15:22.430