HIGH✓ PATCH🇬🇧 English

CVE-2024-36787

CVSS 8.8v3.1pub. 2024-06-07upd. 2025-05-29

An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass authentication and access the administrative interface via unspecified vectors.

oryginał EN
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Netgear Wnr614

    HW
    Netgear
    wszystkie wersje

  • Netgear Wnr614 Firmware

    OS
    Netgear
    1.1.0.54_1.0.1
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
Auth Bypass
CWE
Referencje

Powiązane podatności

CVE-2016-10174CRITICAL9.8⚠ KEVten sam produkt

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL...

CVE-2024-36789HIGH8.1ten sam produkt

An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create passwords that do not con...

CVE-2024-36790HIGH8.8ten sam produkt

Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plaintext.

CVE-2024-36792HIGH8.2ten sam produkt

An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to...

CVE-2016-11057HIGH7.5ten sam produkt

Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-...

CVE-2024-36787 — HIGH 8.8 | CVEbaza.pl