CVE-2019-17373

Certain NETGEAR devices allow unauthenticated access to critical .cgi and .htm pages via a substring ending with .jpg, such as by appending ?x=1.jpg to a URL. This affects MBR1515, MBR1516, DGN2200, DGN2200M, DGND3700, WNR2000v2, WNDR3300, WNDR3400, WNR3500, and WNR834Bv2...

NETGEAR DGND3700 Authentication Bypass Vulnerability (Dec 2020)

NETGEAR DGN3700 devices are prone to an authentication bypass vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

CVE-2019-17373

Certain NETGEAR devices allow unauthenticated access to critical .cgi and .htm pages via a substring ending with .jpg, such as by appending ?x=1.jpg to a URL. This affects MBR1515, MBR1516, DGN2200, DGN2200M, DGND3700, WNR2000v2, WNDR3300, WNDR3400, WNR3500, and WNR834Bv2...

CVE-2019-17373

CVE-2019-17373 affects several NETGEAR devices (MBR1515/1516, DGN2200/2200M, DGND3700, WNR2000v2, WNDR3300/3400, WNR3500, WNR834Bv2). The issue is an unauthenticated access vulnerability that lets an attacker reach critical .cgi and .htm pages by manipulating a URL with a substring ending in .jpg...