CVE-2024-28340

No fix known EPSS <1%CVSS 7.5

An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required.

Published 2024-03-12 · CVE record · OSV

Products: netgear cbr40_firmware, netgear cbk40_firmware, netgear cbk43_firmware