CVE-2024-28340: Infoleak
An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28340?
CVE-2024-28340 is rated as a high-severity vulnerability due to its ability to expose sensitive information without authentication.
How can I mitigate the effects of CVE-2024-28340?
To mitigate CVE-2024-28340, users should immediately update their Netgear CBR40, CBK40, and CBK43 devices to the latest firmware version provided by Netgear.
What specific information can be leaked due to CVE-2024-28340?
CVE-2024-28340 allows attackers to obtain sensitive information, although specific details of the leaked information depend on the device configuration.
Is authentication required to exploit CVE-2024-28340?
No, CVE-2024-28340 can be exploited without any authentication, making it particularly dangerous.
Which Netgear products are affected by CVE-2024-28340?
CVE-2024-28340 affects the Netgear CBR40, CBK40, and CBK43 models running version 2.5.0.28.