CVE-2024-36788

Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices.

Score

CVSS 3.1 5.9 Medium

Status

Modified - cve@mitre.org

Published

2024-06-07

Last modified

2025-02-13

Weaknesses

CWE-922

Affected products

• Wnr614 Firmware (Netgear)

References

• https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-netgear-wnr614-router/