PatchTheCVECVE-2024-51004: Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in t
CVE-2024-51004 is a medium-severity flaw (CVSS 5.7) affecting r8500 firmware, r7000p firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usb_device.cgi via the cifs_user, read_access, and write_access parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted POST request.
Why this priority
- No elevated risk signals yet
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 5.7 (Medium) |
| Attack vector | Adjacent network |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.3% (top 77%) |
| CISA exploited list | No |
| Weakness | CWE-120 |
| Published | 2024-11-05 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-51004?
r8500 firmware: mitigate or apply the listed mitigation; r7000p firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2024-51004 being exploited?
CVE-2024-51004 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-51004 affect?
CVE-2024-51004 affects r8500 firmware, r7000p firmware. Severity is medium (CVSS 5.7). Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usb_device.cgi via the cifs_user, read_access, and write_access parameters. These vulnerabilities allow attackers to
How urgent is CVE-2024-51004?
Priority 26/100. No elevated risk signals yet.
Software pages
Related CVEs
- CVE-2024-52022 HIGH 8.0 MITIGATE MITIGATE Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contai
- CVE-2024-52021 HIGH 8.0 MITIGATE Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parame
- CVE-2024-52020 HIGH 8.0 MITIGATE Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parame
- CVE-2024-52019 HIGH 8.0 MITIGATE Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parame
- CVE-2024-52016 MEDIUM 5.7 MITIGATE MITIGATE Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multip