CVE-2025-4977

CVE-2025-4977 affects Netgear DGND3700, specifically some unknown functionality in the file /BRS_top.html . The linked documents indicate an information-disclosure vulnerability that can be triggered remotely, with an exploit having been disclosed publicly. The primary affected hardware is Netgea...

NETGEAR DGND3700 访问控制错误漏洞

The Netgear DGND3700 is an integrated, multi-functional wireless router for home and small office environments. An information disclosure vulnerability exists in the Netgear DGND3700. The vulnerability originates from unknown code in the minihttp component file /currentsetting.htm. An attacker ca...

PT-2025-22144 · Unknown +1 · Mini Httpd +1

Name of the Vulnerable Software and Affected Versions: Netgear DGND3700 version 1.1.00.15 1.00.15NA Description: A vulnerability has been found in the mini http component, specifically affecting the /currentsetting.htm file, leading to information disclosure. The attack can be initiated remotely...

NETGEAR DGND3700 安全漏洞

The Netgear DGND3700 is a modem router from NETGEAR. The Netgear DGND3700 suffers from an information disclosure vulnerability that originates from improper handling of the file /BRStop.html, which can be exploited by an attacker to cause information disclosure...

NETGEAR DGND3700 安全漏洞

The Netgear DGND3700 is a dual-band Gigabit wireless DSL router manufactured by NETGEAR and is primarily used for home and SMB network connections. The Netgear DGND3700 suffers from an improper authentication vulnerability that originates in an unknown portion of Basic Authentication's file...

PT-2025-22135 · NetGear · Netgear Dgnd3700

Name of the Vulnerable Software and Affected Versions: Netgear DGND3700 version 1.1.00.15 1.00.15NA Description: A very critical issue was found, affecting the Basic Authentication component of the Netgear DGND3700. This issue leads to improper authentication and can be initiated remotely. The...

CVE-2025-4980: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been found in Netgear DGND3700 1.1.00.151.00.15NA and classified as problematic. This vulnerability affects unknown code of the file /currentsetting.htm of the component minihttp. The manipulation leads to information disclosure. The attack can be initiated remotely. The explo...

CVE-2025-4978: Improper Authentication

A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.151.00.15NA. This affects an unknown part of the file /BRStop.html of the component Basic Authentication. The manipulation leads to improper authentication. It is possible to initiate the attack remotely...

CVE-2025-4977: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, has been found in Netgear DGND3700 1.1.00.151.00.15NA. Affected by this issue is some unknown functionality of the file /BRStop.html. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been...

PT-2025-22134 · NetGear · Netgear Dgnd3700

Name of the Vulnerable Software and Affected Versions: Netgear DGND3700 version 1.1.00.15 1.00.15NA Description: A vulnerability has been found in the Netgear DGND3700, affecting some unknown functionality of the file /BRS top.html. The manipulation leads to information disclosure. The attack may...

NETGEAR JWNR2000v2 sub_4238E8 function buffer overflow vulnerability

The NETGEAR JWNR2000v2 is a wireless router from NETGEAR. The NETGEAR JWNR2000v2 suffers from a buffer overflow vulnerability that originates from the sub4238E8 function's parameter host failing to correctly validate the length of the input data, which can be exploited by an attacker to execute...

NETGEAR WG302v2 Command Injection Vulnerability

The NETGEAR WG302v2 is a wireless access point from NETGEAR. The NETGEAR WG302v2 suffers from a command injection vulnerability that stems from the uigetinputvalue function parameter host failing to properly filter constructor command special characters, commands, and so on. No details of the...

NETGEAR JWNR2000v2 check_language_file function buffer overflow vulnerability

The NETGEAR JWNR2000v2 is a wireless router from NETGEAR. The NETGEAR JWNR2000v2 suffers from a buffer overflow vulnerability that originates from the checklanguagefile function parameter host failing to properly validate the length of input data, which can be exploited by an attacker to execute...

NETGEAR EX6120 sub_30394 function buffer overflow vulnerability

The NETGEAR EX6120 is a wireless extender from NETGEAR. The NETGEAR EX6120 suffers from a buffer overflow vulnerability that stems from the sub30394 function parameter host failing to properly validate the length and size of input data, which can be exploited by an attacker to execute arbitrary...

NETGEAR JWNR2000v2 default_version_is_new function buffer overflow vulnerability

The NETGEAR JWNR2000v2 is a wireless router from NETGEAR. The NETGEAR JWNR2000v2 suffers from a buffer overflow vulnerability that originates from the defaultversionisnew function parameter host failing to correctly validate the length of the input data, which can be exploited by an attacker to...

NETGEAR RAX5 apcli_do_enr_pbc_wps function command injection vulnerability

The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability that stems from the failure of the ifname parameter in the apclidoenrpbcwps function to correctly filter constructed command special characters, commands, and so on. An attacker can...

NETGEAR EX6200 sub_3C8EC Function Buffer Overflow Vulnerability

NETGEAR EX6200 is a wireless network signal extender from NETGEAR. The NETGEAR EX6200 suffers from a buffer overflow vulnerability that originates from the sub3C8EC function parameter host failing to properly validate the length of the input data, which can be exploited by an attacker to execute...

NETGEAR EX6120 fwAcosCgiInbound Function Buffer Overflow Vulnerability

The NETGEAR EX6120 is a wireless extender from NETGEAR. The NETGEAR EX6120 suffers from a buffer overflow vulnerability that originates from the fwAcosCgiInbound function parameter host failing to correctly validate the length and size of the input data, which can be exploited by an attacker to...

NETGEAR RAX5 apcli_cancel_wps function command injection vulnerability

The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability that stems from the failure of the ifname parameter in the apclicancelwps function to correctly filter constructed command special characters, commands, and so on. An attacker can explo...

NETGEAR EX6200 sub_54014 Function Buffer Overflow Vulnerability

NETGEAR EX6200 is a wireless network signal extender from NETGEAR. The NETGEAR EX6200 suffers from a buffer overflow vulnerability that originates from the sub54014 function parameter host failing to properly validate the length of the input data, which can be exploited by an attacker to execute...