CVE-2024-28339: Infoleak
An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28339?
CVE-2024-28339 is classified as a medium severity vulnerability due to its potential to expose sensitive information without authentication.
How do I fix CVE-2024-28339?
To mitigate CVE-2024-28339, update your Netgear CBR40, CBK40, or CBK43 to the latest firmware version provided by Netgear.
What products are affected by CVE-2024-28339?
CVE-2024-28339 affects the Netgear CBR40, CBK40, and CBK43 running version 2.5.0.28.
What kind of information is leaked due to CVE-2024-28339?
CVE-2024-28339 can result in the exposure of sensitive information included in the 'debuginfo.htm' component.
Is authentication required to exploit CVE-2024-28339?
No, CVE-2024-28339 can be exploited without any authentication, making it particularly dangerous.