DGN2200 - Authentication Bypass (CVE-2024-57046)

CVE-2024-57046 is an authentication bypass vulnerability in the Netgear DGN2200 router (firmware v1.0.0.46 and earlier), where appending "?x=1.gif" to a URL allows attackers to access protected resources without valid credentials. This flaw could be exploited by unauthorized users to gain full control over the router’s administrative interface, potentially leading to network compromise, data theft, or further attacks on connected devices.

CrowdSec has been tracking this vulnerability and its exploits since 15th of April 2026.

CrowdSec network observations suggest that most exploitation of CVE-2024-57046 involves focused reconnaissance to identify viable targets. Attackers typically tailor their campaigns based on system exposure and configuration. It is unlikely that a given attack is accidental. CrowdSec data also reveals a clear uptick in attacks involving CVE-2024-57046 over the past week. Activity is above the usual baseline, suggesting growing attention from attackers. This may reflect rising awareness, recent exploit releases, or expanded targeting efforts.

Attackers exploit this vulnerability by appending ?x=1.gif to administrative URLs on Netgear DGN2200 routers, bypassing authentication controls and gaining unauthorized access to configuration and status pages.