CVE-2025-4977
Netgear DGND3700 BRS_top.html information disclosure
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
A vulnerability, which was classified as problematic, has been found in Netgear DGND3700 1.1.00.15_1.00.15NA. Affected by this issue is some unknown functionality of the file /BRS_top.html. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.
Eine problematische Schwachstelle wurde in Netgear DGND3700 1.1.00.15_1.00.15NA entdeckt. Betroffen davon ist ein unbekannter Prozess der Datei /BRS_top.html. Durch Beeinflussen mit unbekannten Daten kann eine information disclosure-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2025-05-20 CVE Reserved
- 2025-05-20 CVE Published
- 2025-05-20 CVE Updated
- 2025-05-20 First Exploit
- 2025-05-21 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
- CWE-284: Improper Access Control
CAPEC
References (4)
URL | Tag | Source |
---|---|---|
https://vuldb.com/?id.309638 | Vdb Entry | |
https://vuldb.com/?submit.564711 | Third Party Advisory | |
https://www.netgear.com | Product |
URL | Date | SRC |
---|---|---|
https://github.com/at0de/my_vulns/blob/main/Netgear/DGND3700v2/BRS_top.md | 2025-05-20 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|