CVE-2024-28339

An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required.

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - cve@mitre.org

Published

2024-03-12

Last modified

2024-08-28

Weaknesses

CWE-200

Affected products

• Cbk40 Firmware (Netgear)
• Cbk43 Firmware (Netgear)
• Cbr40 Firmware (Netgear)

References

• https://github.com/funny-mud-peee/IoT-vuls/blob/main/Netgear%20CBR40%5CCBK40%5CCBK43/Info%20Leak%20in%20Netgear-CBR40%E…
• https://www.netgear.com/about/security/