CVE-2024-6646

The Netgear WN604 Web Interface vulnerability in downloadFile.php allows information disclosure via the file parameter (config), with a remote attacker able to obtain administrator credentials, potentially enabling full router control. This is a remote issue; exploitation details are available in...

CVE-2024-6646 Netgear WN604 Web Interface downloadFile.php information disclosure

A vulnerability was found in Netgear WN604 up to 20240710. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /downloadFile.php of the component Web Interface. The manipulation of the argument file with the input config leads to information...

CVE-2024-6646: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in Netgear WN604 up to 20240710. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /downloadFile.php of the component Web Interface. The manipulation of the argument file with the input config leads to information...

NETGEAR WN604 信息泄露漏洞

The NETGEAR WN604 is a small wireless router from NETGEAR. The NETGEAR WN604 suffers from an information disclosure vulnerability that originates in the parameter file of file/downloadFile.php, which is not sufficiently protected for sensitive information and can be exploited by an attacker to...

NETGEAR RAX30 Information Disclosure Vulnerability (CNVD-2025-11215)

The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. The NETGEAR RAX30 suffers from an information disclosure vulnerability that can be exploited by an attacker to obtain sensitive information...

Netgear DG834Gv5 Disclosure Protected Information

The vulnerability in the web-based management interface of Netgear DG834Gv5 integrated software lies in the unencrypted storage of critical information. Exploiting this vulnerability allows an attacker to disclose the protected data remotely...

PT-2024-5008 · NetGear · Netgear Wn604

Name of the Vulnerable Software and Affected Versions: Netgear WN604 versions up to 20240710 Description: A vulnerability was found in the Web Interface component of Netgear WN604, specifically in the /downloadFile.php file. The issue is related to insufficient protection of internal data. The...

Netgear WNR614 N300 Weak Password Requirements

The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software is related to weak password requirements. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the router’s PIN code...

Netgear WNR614 N300 Cookie Disclosure

The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software relates to the use of cookies for storing confidential information without the HttpOnly flag. Exploiting this vulnerability can allow an attacker to disclose the protected information...

Tomcat Code Execution

The vulnerability of the Tomcat microprogramming software used in Netgear ProSafe NMS300 devices is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the SYSTEM context...

Netgear WNR614 N300 Authentication Bypass

The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a remote attacker to create arbitrary passwords...

Netgear ProSafe NMS300 Privilege Escalation

The vulnerability of Netgear ProSafe NMS300 network device software relates to the use of default login credentials. Exploiting this vulnerability can allow attackers to enhance their privileges...

Netgear WNR614 N300 Weak Password Requirements

The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software is related to weak password requirements. Exploiting this vulnerability allows a remote attacker to create arbitrary passwords...

Netgear WNR614 N300 Info Disclosure

The vulnerability of Netgear WNR614 N300 Wi-Fi router’s microprogramming software lies in the storage of sensitive information in an unencrypted form. Exploiting this vulnerability could allow a remote attacker to disclose the protected information...

Unspecified Vulnerability in NETGEAR WNR614

The Netgear WNR614 is an N300 wireless router with external antenna from Netgear USA. The Netgear WNR614 has a security vulnerability that originates from allowing an attacker to create security standard passwords that do not meet the definitions. No details of the vulnerability are provided at...

Unspecified Vulnerability in NETGEAR WNR614

The Netgear WNR614 is an N300 wireless router with external antenna from Netgear USA. The Netgear WNR614 has a security vulnerability that originates from storing credentials in plain text. No details of the vulnerability are provided at this time...

Unspecified Vulnerability in NETGEAR WNR614

The Netgear WNR614 is an N300 wireless router with external antenna from Netgear USA. The Netgear WNR614 suffers from a security vulnerability that stems from not properly setting the HTTPOnly flag of a cookie, which can be exploited by an attacker to intercept and access sensitive communications...

NETGEAR WNR614 Information Disclosure Vulnerability

The NETGEAR WNR614 is an N300 wireless router with external antenna from Netgear USA. The NETGEAR WNR614 suffers from an information disclosure vulnerability that stems from a faulty WPS implementation that can be exploited by an attacker to access the router's password...

NETGEAR WNR614 Information Disclosure Vulnerability

The NETGEAR WNR614 is an N300 wireless router with external antenna from Netgear USA. The NETGEAR WNR614 suffers from an information disclosure vulnerability that originates from allowing an attacker to bypass authentication and access the management interface via an unspecified vector. No detail...

NETGEAR ProSAFE Network Management System Directory Traversal Vulnerability

NETGEAR ProSAFE Network Management System is a network management system from NETGEAR that is used to centrally manage, monitor, and configure network devices. A directory traversal vulnerability exists in the NETGEAR ProSAFE Network Management System, which stems from a directory traversal remot...