CVE-2022-29383 PoC — NETGEAR ProSafe SSL VPN firmware FVS336G SQL注入漏洞

Source

https://github.com/cxaqhq/netgear-to-CVE-2022-29383

Associated Vulnerability

Title:NETGEAR ProSafe SSL VPN firmware FVS336G SQL注入漏洞 (CVE-2022-29383)
Description:NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi.

Readme

# NETGEAR ProSafe  SSL VPN
# CVE-2022-29383
to https://github.com/badboycxcc/Netgear-ssl-vpn-20211222-CVE-2022-29383

SQL injection vulnerability exists in scgi-bin/platform.cgi
Firmware version：
FVS318Gv2 and FVS318N


### FVS318Gv2
![](https://github.com/cxaqhq/netgear/blob/main/FVS318G-0.png)

![](https://github.com/cxaqhq/netgear/blob/main/FVS318G-1.png)

### FVS318N
![](https://github.com/cxaqhq/netgear/blob/main/FVS318N-0.png)

![](https://github.com/cxaqhq/netgear/blob/main/FVS318N-1.png)

File Snapshot


 [4.0K]  /data/pocs/6f8e2a8e6595955e2ede4eb30229e41b89ac3ee0
├── [ 97K]  FVS318G-0.png
├── [433K]  FVS318G-1.png
├── [100K]  FVS318N-0.png
├── [389K]  FVS318N-1.png
└── [ 503]  README.md

0 directories, 5 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!