CVE-2024-12847 is an OS command injection vulnerability in NETGEAR DGN1000 routers prior to firmware version 1.1.00.48. The flaw allows remote attackers to bypass authentication and execute arbitrary operating system commands with root privileges by sending specially crafted HTTP requests to the setup.cgi endpoint. This vulnerability is classified under CWE-78 (Improper Neutralization of Special Elements used in an OS Command) and CWE-306 (Missing Authentication for Critical Function). The vulnerability has been observed exploited in the wild, indicating active threat. The CVSS v3.1 base score is 9.8, reflecting critical severity with network attack vector, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation results in full system compromise of affected NETGEAR DGN1000 devices, allowing remote attackers to execute arbitrary commands as root without authentication. This can lead to complete device takeover, data compromise, and disruption of network services. The vulnerability has been exploited in the wild, confirming active risk to unpatched devices.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, affected users should consider disabling remote management features, restricting network access to the device's management interface, or replacing vulnerable devices. Monitor NETGEAR's official channels for firmware updates addressing this vulnerability.