Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x4gc-7rpm-6497

Опубликовано: 20 мая 2025
Источник: github
Github: Не прошло ревью
CVSS4: 9.3
CVSS3: 9.8

Описание

A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of the file /BRS_top.html of the component Basic Authentication. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.

A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of the file /BRS_top.html of the component Basic Authentication. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.

EPSS

Процентиль: 68%
0.00565
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.8
nvd
9 месяцев назад

A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of the file /BRS_top.html of the component Basic Authentication. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.

CVSS3: 9.8
fstec
9 месяцев назад

Уязвимость HTTP-сервера Mini_http встроенного программного обеспечения маршрутизаторов Netgear DGND3700, позволяющая нарушителю обойти существующие ограничения безопасности и получить несанкционированный доступ к веб-интерфейсу устройства

EPSS

Процентиль: 68%
0.00565
Низкий

9.3 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-287