Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/08 12:00 a.m.•6 views

CVE-2025-3759: Missing Authentication for Critical Function

Endpoint /cgi-bin-igd/netcoreset.cgi which is used for changing device configuration is accessible without authentication. This poses a significant security threat allowing for e.g: administrator account hijacking or AP password changing. The vendor was contacted early about this disclosure but d...

8.7CVSS5.7AI score0.0026EPSS
SaveExploits0References1
Rows per page
Query Builder