HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2024-36792

CVSS 8.2v3.1pub. 2024-06-07upd. 2025-05-29

An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain access to the router's pin.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

  • Netgear Wnr614

    HW
    Netgear
    wszystkie wersje

  • Netgear Wnr614 Firmware

    OS
    Netgear
    1.1.0.54_1.0.1
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2016-10174CRITICAL9.8⚠ KEVten sam produkt

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL...

CVE-2024-36789HIGH8.1ten sam produkt

An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create passwords that do not con...

CVE-2024-36790HIGH8.8ten sam produkt

Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plaintext.

CVE-2024-36787HIGH8.8ten sam produkt

An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass authentication and access...

CVE-2016-11057HIGH7.5ten sam produkt

Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-...