CVE-2019-17137

CVE-2019-17137 Info CVE: https://vulners.com/cve/CVE-2019-17137 POC GET /index.htm%00currentsetting.htm HTTP/1.1 Host: 192.168.1.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0 Accept: / Accept-Language:...

Netgear R6850 - Information Disclosure Detection

Netgear R6850 router firmware version V1.1.0.88 contains an information leakage vulnerability in the currentsetting.htm page.This hidden interface is not protected by authentication, allowing unauthenticated attackers to access sensitive informationsuch as firmware version, model details,...

NETGEAR Router Panel - Detect

NETGEAR router panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NETGEAR router panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NETGEAR Router Panel - Detect',...

Netgear WNR614 - Improper Authentication Detection

A vulnerability in the Netgear WNR614 router permits unauthorized individuals to bypass the authentication. When adding "%00currentsetting.htm" to the the requested url, it will be recognized as passing the authentication. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in the Netgea...

NETGEAR WNR614 Improper Authentication Vulnerability

The NETGEAR WNR614 is a wireless router for home and small office environments with basic network management features and 150Mbps wireless transmission performance. The NETGEAR WNR614 suffers from an improper authentication vulnerability that originates from an input to currentsetting.htm, which...

NETGEAR WNR614 security vulnerabilities

The NETGEAR WNR614 is a wireless router for home and small office environments with basic network management features and 150Mbps wireless transmission performance. The NETGEAR WNR614 suffers from an improper authentication vulnerability that originates from an input to currentsetting.htm, which...

CVE-2025-4980

A vulnerability has been found in Netgear DGND3700 1.1.00.151.00.15NA and classified as problematic. This vulnerability affects unknown code of the file /currentsetting.htm of the component minihttp. The manipulation leads to information disclosure. The attack can be initiated remotely. The explo...

NETGEAR DGND3700 Access Control Vulnerability

The Netgear DGND3700 is an integrated, multi-functional wireless router for home and small office environments. An information disclosure vulnerability exists in the Netgear DGND3700. The vulnerability originates from unknown code in the minihttp component file /currentsetting.htm. An attacker ca...

CVE-2025-4980: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been found in Netgear DGND3700 1.1.00.151.00.15NA and classified as problematic. This vulnerability affects unknown code of the file /currentsetting.htm of the component minihttp. The manipulation leads to information disclosure. The attack can be initiated remotely. The explo...

Netgear R6850 currentsetting.htm file information disclosure vulnerability

The Netgear R6850 is a wireless router from NETGEAR. The Netgear R6850 suffers from an information disclosure vulnerability that originates from insufficient protection of sensitive information in currentsetting.htm, which can be exploited by an attacker to obtain sensitive information...

CVE-2024-30569

An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

CVE-2024-30569

An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

CVE-2024-30569: Exposure of Sensitive Information to an Unauthorized Actor

An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

Netgear R6850 security vulnerabilities

The Netgear R6850 is a wireless router from NETGEAR. The Netgear R6850 suffers from an information disclosure vulnerability that originates from insufficient protection of sensitive information in currentsetting.htm, which can be exploited by an attacker to obtain sensitive information...

PT-2024-23496 · NetGear · Netgear R6850

Name of the Vulnerable Software and Affected Versions: Netgear R6850 version 1.1.0.88 Description: The issue is an information leak in the currentsetting.htm file, allowing attackers to obtain sensitive information without requiring any authentication. Recommendations: For Netgear R6850 version...

CVE-2024-30569

An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required...

NETGEAR CBR40/CBK40/CBM43 currentsetting.htm component information disclosure vulnerability

The NETGEAR CBR40/CBK40/CBM43 are all routers from NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. An information disclosure vulnerability exists in the NETGEAR CBR40/CBK40/CBM43, which stems from insufficient protection of sensitive informati...

CVE-2024-28340

An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required...

Authentication flaw

An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required...

CVE-2024-28340: Exposure of Sensitive Information to an Unauthorized Actor

An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required...