CVE-2025-4977 Netgear DGND3700 BRS_top.html information disclosure

A vulnerability, which was classified as problematic, has been found in Netgear DGND3700 1.1.00.151.00.15NA. Affected by this issue is some unknown functionality of the file /BRStop.html. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been...

CVE-2025-4977 Netgear DGND3700 BRS_top.html information disclosure

A vulnerability, which was classified as problematic, has been found in Netgear DGND3700 1.1.00.151.00.15NA. Affected by this issue is some unknown functionality of the file /BRStop.html. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been...

PT-2025-22144 · Unknown +1 · Mini Httpd +1

Name of the Vulnerable Software and Affected Versions: Netgear DGND3700 version 1.1.00.15 1.00.15NA Description: A vulnerability has been found in the mini http component, specifically affecting the /currentsetting.htm file, leading to information disclosure. The attack can be initiated remotely...

CVE-2025-4978: Improper Authentication

A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.151.00.15NA. This affects an unknown part of the file /BRStop.html of the component Basic Authentication. The manipulation leads to improper authentication. It is possible to initiate the attack remotely...

PT-2025-22135 · NetGear · Netgear Dgnd3700

Name of the Vulnerable Software and Affected Versions: Netgear DGND3700 version 1.1.00.15 1.00.15NA Description: A very critical issue was found, affecting the Basic Authentication component of the Netgear DGND3700. This issue leads to improper authentication and can be initiated remotely. The...

CVE-2025-4977: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, has been found in Netgear DGND3700 1.1.00.151.00.15NA. Affected by this issue is some unknown functionality of the file /BRStop.html. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been...

PT-2025-22134 · NetGear · Netgear Dgnd3700

Name of the Vulnerable Software and Affected Versions: Netgear DGND3700 version 1.1.00.15 1.00.15NA Description: A vulnerability has been found in the Netgear DGND3700, affecting some unknown functionality of the file /BRS top.html. The manipulation leads to information disclosure. The attack may...

CVE-2025-4980: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been found in Netgear DGND3700 1.1.00.151.00.15NA and classified as problematic. This vulnerability affects unknown code of the file /currentsetting.htm of the component minihttp. The manipulation leads to information disclosure. The attack can be initiated remotely. The explo...

NETGEAR DGND3700 Authentication Bypass Vulnerability (Dec 2020)

NETGEAR DGN3700 devices are prone to an authentication bypass vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

CVE-2019-17373: Undefined Security Weakness

Certain NETGEAR devices allow unauthenticated access to critical .cgi and .htm pages via a substring ending with .jpg, such as by appending ?x=1.jpg to a URL. This affects MBR1515, MBR1516, DGN2200, DGN2200M, DGND3700, WNR2000v2, WNDR3300, WNDR3400, WNR3500, and WNR834Bv2...

PT-2018-4932

Name of the Vulnerable Software and Affected Versions Netgear DGN2200 version DGN2200-V1.0.0.50 7.0.50 Netgear DGND3700 version DGND3700-V1.0.0.17 1.0.17 Description A remote attacker can access the 'BSW cxttongr.htm' page without authentication, exposing the admin password in clear text before i...

CVE-2016-5649: Cleartext Transmission of Sensitive Information

A vulnerability is in the 'BSWcxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.507.0.50, and DGND3700, version DGND3700-V1.0.0.171.0.17, which can allow a remote attacker to access this page without any authentication. When processed, it exposes the admin password in clear text...