CVE-2025-5495

Katalog CVE

CVSS 9.8 · Critical EPSS 0,95%

Kerentanan Improper Authentication pada netgear wnr614 firmware. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW. It has been classified as critical. This affects an unknown part of the component URL Handler. The manipulation with the input %00currentsetting.htm leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This issue appears to have been circulating as an 0day since 2024.

Rincian

Terbit di NVD

3 Juni 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication

EPSS (30 hari)

0,95% peluang dieksploitasi; lebih tinggi dari 60,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/Shuanunio/CVE_Requests/blob/main/Netgear/WNR614/ACL%20bypass%20Vulnerability%20in%20Netgear... exploit · advisory pihak ketiga
• https://vuldb.com/?id.310911 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.584939 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.310911 permissions required · vdb entry
• https://www.netgear.com/ product