CVE-2024-1430: Netgear R7000 Web Management Interface currentsetting.htm information disclosure

Published Feb 11, 2024

Updated

A vulnerability has been found in Netgear R7000 1.0.11.13610.2.120 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /currentsetting.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

All of the following

Netgear R7000 Firmware=1.0.11.136_10.2.120

Netgear R7000

Event History

Feb 11, 2024

CVE Published

via MITRE·12:31 AM

Data Sourced

via MITRE·12:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-1430?

CVE-2024-1430 is classified as a problematic vulnerability affecting the Netgear R7000 firmware.

How do I fix CVE-2024-1430?

To mitigate CVE-2024-1430, it is recommended to update the Netgear R7000 firmware to the latest version available.

What does CVE-2024-1430 affect?

CVE-2024-1430 affects the Web Management Interface, specifically the file /currentsetting.htm on the Netgear R7000 firmware.

What type of vulnerability is CVE-2024-1430?

CVE-2024-1430 is an information disclosure vulnerability that may expose sensitive information.

Who is affected by CVE-2024-1430?

Only users operating the Netgear R7000 with the specific firmware version 1.0.11.136_10.2.120 are affected by CVE-2024-1430.