CVE-2024-28340

An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required...

CVE-2024-28340

CVE-2024-28340 affects NETGEAR CBR40/CBK40/CBK43 routers with firmware 2.5.0.28. The currentsetting.htm component exposes an information‑leak vulnerability that allows unauthenticated attackers to obtain sensitive data via the web interface due to insufficient access control. The CVSS v3.1 base s...