Netgear

Wnr614 Firmware

11 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2025-5495

Exploit
  • EPSS 0.64%
  • Published 03.06.2025 12:31:04
  • Last modified 11.08.2025 18:48:40

A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW. It has been classified as critical. This affects an unknown part of the component URL Handler. The manipulation with the input %00currentsetting.htm leads to improper authentication. It is...

8.8

CVE-2024-36787

Exploit
  • EPSS 0.02%
  • Published 07.06.2024 15:15:50
  • Last modified 29.05.2025 16:12:33

An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass authentication and access the administrative interface via unspecified vectors.

4.8

CVE-2024-36788

Exploit
  • EPSS 0.05%
  • Published 07.06.2024 15:15:50
  • Last modified 21.11.2024 09:22:38

Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices.

8.1

CVE-2024-36789

Exploit
  • EPSS 0.07%
  • Published 07.06.2024 15:15:50
  • Last modified 29.05.2025 16:12:26

An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create passwords that do not conform to defined security standards.

8.8

CVE-2024-36790

Exploit
  • EPSS 0.04%
  • Published 07.06.2024 15:15:50
  • Last modified 29.05.2025 16:12:17

Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plaintext.

8.2

CVE-2024-36792

Exploit
  • EPSS 0.08%
  • Published 07.06.2024 15:15:50
  • Last modified 29.05.2025 16:12:10

An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain access to the router's pin.

4

CVE-2024-36795

Exploit
  • EPSS 0.12%
  • Published 06.06.2024 21:15:48
  • Last modified 29.05.2025 16:14:02

Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to access URLs and directories embedded within the firmware via unspecified vectors.

7.5

CVE-2016-11057

  • EPSS 0.28%
  • Published 28.04.2020 17:15:12
  • Last modified 21.11.2024 02:45:23

Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618 before 2017-01-06, JWNR2000v5 before 2017-01-06, WNR2020 before 2017-01-06, JWNR2010v5 before 2017-0...

8.8

CVE-2017-18791

  • EPSS 0.17%
  • Published 21.04.2020 19:15:11
  • Last modified 21.11.2024 03:20:55

Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 before 1.1.0.50, WNDR3700v5 before 1.1.0.48, JNR1010v2 before 1.1.0.40, JWNR2010v5 before 1.1.0.40, WNR1000v4 before 1.1.0.40, WNR20...

8.8

CVE-2019-20690

  • EPSS 0.06%
  • Published 16.04.2020 19:15:23
  • Last modified 21.11.2024 04:39:05

Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.30, D7000 before 1.0.1.66, R6020 before 1.0.0.34, R6080 before 1.0.0.34, R6120 before 1.0.0.44, R6220 before 1.1.0.68, WNR2020 before 1.1.0.54, and WNR614...