CVE-2013-2751: Critical – Eval injection vulnerability in frontview/lib/np_handler.pl in the

CWE Weakness Definitions

CWE-94: Code Injection

Attacker injects arbitrary code that is executed by the application process.

Related Attack Patterns (CAPEC)

CAPEC-35 Leverage Executable Code in Non-Executable Files

via CWE-94

CAPEC-77 Manipulating User-Controlled Variables

via CWE-94

CAPEC-242 Code Injection

via CWE-94

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ SAGE Intelligence — CITED Relevance Research Team

A critical eval injection vulnerability exists in the FrontView web interface of NETGEAR ReadyNAS RAIDiator, allowing remote attackers to execute arbitrary Perl code through a crafted request in the forgot password workflow.

BSID: BS-2013-GLOBAL-157004-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →

Frequently Asked Questions

What is CVE-2013-2751?

A critical eval injection vulnerability exists in the FrontView web interface of NETGEAR ReadyNAS RAIDiator, allowing remote attackers to execute arbitrary Perl code through a crafted request in the forgot password workflow.

What is the CVSS score for CVE-2013-2751?

CVE-2013-2751 has CVSS 10.0 (Critical). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS: 71.6%.

Is CVE-2013-2751 actively exploited?

Public exploit available for CVE-2013-2751. Exploitation risk elevated.

How do I remediate CVE-2013-2751?

Priority: IMMEDIATE. Advisory: http://www.readynas.com/?p=7002 PSIRT: [email protected]

What systems are affected by CVE-2013-2751?

CVE-2013-2751 affects: Netgear.

Vulnerability Details

CVE ID	`CVE-2013-2751`
BSID	`BS-2013-GLOBAL-157004-C` BreachSpider Global ID
CVSS Vector	`AV:N/AC:L/Au:N/C:C/I:C/A:C`
Published	2013-12-12
Last Modified	2026-04-29
ICS Relevance	70%
Weakness (CWE)	Code Injection
Domains	NETWORK-INFRA
Source	NVD

Official Description

Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute arbitrary Perl code via a crafted request, related to the "forgot password workflow."

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability is located in the np_handler.pl script within the frontview/lib directory. Attackers can exploit this by sending a specially crafted request to the affected web interface, which can lead to arbitrary code execution with the privileges of the web server.

Exploitation Likelihood: CRITICAL

Affected Products

Vendor	Product	Fixed Version
Netgear	Raidiator	—

Remediation

View Vendor Advisory →

Remediation Priority: IMMEDIATE

Vendor PSIRT: [email protected]

Threat Intelligence

● Threat Intelligence Validated: August 2026 | Threat Age: 4618 Days

CISA KEV	Not in KEV catalog
Public Exploit	⚠ Available — Reference
PoC Code	Not confirmed

SAGE Enrichment Record — provenance & audit hash

Model	`/workspace/models/qwen2.5-coder-32b-instruct-bf16`
Confidence	HIGH
Enriched At	2026-05-24

Related CVEs affecting Netgear

CVE-2006-1002 10.0 NETGEAR WGT624 Wireless DSL router has a default account of super_username "G... CVE-2007-4361 10.0 NETGEAR (formerly Infrant) ReadyNAS RAIDiator before 4.00b2-p2-T1 beta create... CVE-2006-6059 10.0 Buffer overflow in MA521nd5.SYS driver 5.148.724.2003 for NetGear MA521 PCMCI... CVE-2006-5972 10.0 Stack-based buffer overflow in WG111v2.SYS in NetGear WG111v2 wireless adapte... CVE-2022-4390 10.0 A network misconfiguration is present in versions prior to 1.0.9.90 of the NE...

View all Netgear CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Check Your Assets Free →