CrowdSecLive Exploit Tracker
00/10
CrowdSec Score

NETGEAR DGN1000/DGN220 - RCE (CVE-2024-12847)

Published on10-01-2025
First seen on19-09-2025
XXX
Exploiting IPs reported

NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been exploited in the wild since at least 2017.

CrowdSec analysis

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

Exploitation

Get real-time information about exploitation attempts and actors involved.

Exploit Timeline

This timeline shows the history of exploitation attempts for this CVE, as detected by the CrowdSec community.

Unlock the Exploitation timeline with the
CrowdSec Live Exploit Tracker plan

Detected IPs

Discover the IPs that targeted this vulnerability across the CrowdSec Network.

Protection

Find out relevant information to protect your stack against this CVE.

glow

Stay Protected against CVE Exploiters

Quick Download icon

Quick Download

Get the list of IPs exploiting this vulnerability

Download
Firewall Sync icon

Firewall Sync

Sync with your firewall a live feed of IPs exploiting this vulnerability

Sync
JSON Live Feed icon

JSON Live Feed

Access a dedicated API endpoint to get a live JSON feed

Get The Feed