What’s Vulnerable › Vulnerabilities

CVE-2019-17049

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-09-30 · updated 2026-06-17
• Weakness: CWE-89

Description

NETGEAR SRX5308 4.3.5-3 devices allow SQL Injection, as exploited in the wild in September 2019 to add a new user account.

Affected products

• Netgear SRX5308: 4.3.5-3

References

• https://community.netgear.com/t5/Hardware-VPN-Firewalls-and/Successful-hack-of-our-SRX5308/m-p/1805846
• https://community.netgear.com/t5/Hardware-VPN-Firewalls-and/Successful-hack-of-our-SRX5308/m-p/1805846

Get alerted when CVE-2019-17049 or the next vulnerability affects your stack