Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-4978

Опубликовано: 20 мая 2025
Источник: nvd
CVSS3: 9.8
CVSS2: 10
EPSS Низкий

Описание

A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of the file /BRS_top.html of the component Basic Authentication. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:netgear:dgnd3700_firmware:1.1.00.15_1.00.15na:*:*:*:*:*:*:*
cpe:2.3:h:netgear:dgnd3700:v2:*:*:*:*:*:*:*

EPSS

Процентиль: 67%
0.0054
Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.8
github
9 месяцев назад

A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of the file /BRS_top.html of the component Basic Authentication. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.

CVSS3: 9.8
fstec
9 месяцев назад

Уязвимость HTTP-сервера Mini_http встроенного программного обеспечения маршрутизаторов Netgear DGND3700, позволяющая нарушителю обойти существующие ограничения безопасности и получить несанкционированный доступ к веб-интерфейсу устройства

EPSS

Процентиль: 67%
0.0054
Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-287