Vulnerabilities

TI-2025-04935 CVE-2025-5495 · GHSA-fxhf-2c5f-jh3q

Netgear WNR614 URL improper authentication

HIGH 70

A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01038 Published 2025-06-03 No fix listed CWE-287

TI-2024-24406 CVE-2024-36788 · GHSA-8f46-hh28-cq8h

Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for…

LOW 26

Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.00268 Published 2024-06-07 No fix listed CWE-922

TI-2024-24408 CVE-2024-36790 · GHSA-3g7r-r3cr-q6f8

Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plaintext.

HIGH 73

Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plaintext.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00347 Published 2024-06-07 No fix listed CWE-312

TI-2024-24407 CVE-2024-36789 · GHSA-8wgj-qwf7-w6vx

An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create…

HIGH 70

An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create passwords that do not conform to defined security standards.

CVSS 3.1HIGH 8.1 Adjacent network No auth No interaction EPSS 0.00402 Published 2024-06-07 No fix listed CWE-521

TI-2024-24405 CVE-2024-36787 · GHSA-hrp7-jrg8-xfwx

An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass…

MEDIUM 41

An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass authentication and access the administrative interface via unspecified vectors.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00566 Published 2024-06-07 No fix listed CWE-1390

TI-2024-24409 CVE-2024-36792 · GHSA-p763-v5vh-f5mg

An issue in the implementation of the WPS in Netgear WNR614…

HIGH 69

An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain access to the router's pin.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00285 Published 2024-06-07 No fix listed CWE-316

TI-2024-24410 CVE-2024-36795 · GHSA-qpvg-vp7c-mg9m

Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to…

MEDIUM 52

Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to access URLs and directories embedded within the firmware via unspecified vectors.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00335 Published 2024-06-06 No fix listed CWE-22

TI-2016-09092 CVE-2016-11057 · GHSA-395v-vr8h-m439

Certain NETGEAR devices are affected by mishandling of repeated URL calls.

LOW 35

Certain NETGEAR devices are affected by mishandling of repeated URL calls.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01015 Published 2020-04-28 No fix listed CWE-287

TI-2017-13941 CVE-2017-18791 · GHSA-xrj3-j65c-j9gg

Certain NETGEAR devices are affected by CSRF.

LOW 38

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0046 Published 2020-04-21 No fix listed CWE-352

TI-2019-14910 CVE-2019-20690 · GHSA-8mhp-wg44-9rxg

Certain NETGEAR devices are affected by authentication bypass.

LOW 39

Certain NETGEAR devices are affected by authentication bypass.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00572 Published 2020-04-16 No fix listed

TI-2016-08250 CVE-2016-10174 · GHSA-rgmj-9q73-5phf

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter…

CRITICAL 100KEV

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.83328 Published 2017-01-30 No fix listed CWE-120

Vulnerabilities

Filters