CVE-2024-1431: Netgear R7000 Web Management Interface debuginfo.htm information disclosure

Published Feb 11, 2024

Updated

A vulnerability was found in Netgear R7000 1.0.11.13610.2.120 and classified as problematic. Affected by this issue is some unknown functionality of the file /debuginfo.htm of the component Web Management Interface. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may be used. VDB-253382 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

All of the following

Netgear R7000 Firmware=1.0.11.136_10.2.120

Netgear R7000

Event History

Feb 11, 2024

CVE Published

via MITRE·02:31 AM

Data Sourced

via MITRE·02:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-1431?

CVE-2024-1431 is classified as problematic and poses a risk of information disclosure.

How do I fix CVE-2024-1431?

To mitigate CVE-2024-1431, update your Netgear R7000 firmware to the latest version that addresses this vulnerability.

What component is affected by CVE-2024-1431?

CVE-2024-1431 affects the Web Management Interface's file /debuginfo.htm on the Netgear R7000.

What kind of attack is possible with CVE-2024-1431?

CVE-2024-1431 can be exploited to achieve unauthorized information disclosure.

Which devices are impacted by CVE-2024-1431?

CVE-2024-1431 impacts devices running Netgear R7000 firmware version 1.0.11.136_10.2.120.