CVE:CVE-2023-38921
CNNVD:CNNVD-202308-485
NETGEAR WG302是美国网件（NETGEAR）公司的一款无线接入点。
NETGEAR WG302v2 v5.2.9版本、WAG302v2 v5.1.19版本存在安全漏洞，该漏洞源于upgrade_handler函数中的firmwareRestore和firmwareServerip参数包含多个命令注入漏洞。
solution:Upgrade netgear wg302v2_firmware to a higher version than 5.2.9,and avoid the version 5.2.9; Upgrade netgear wag302v2_firmware to a higher version than 5.1.19,and avoid the version 5.1.19