CVE-2024-36795: Path Traversal
Published Jun 6, 2024
·Updated
Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.541.0.1 allows attackers to access URLs and directories embedded within the firmware via unspecified vectors.
Affected Software
3 affected components
Netgear WNR614
All of the following
Netgear Wnr614 Firmware=1.1.0.54_1.0.1
Netgear WNR614
Event History
Jan 1, 1970
CVE Published
via MITRE·12:00 AM
Jun 6, 2024
CVE Published
via NVD·09:15 PM
Jun 10, 2024
News Published
via BleepingComputer·09:38 PM
News Published
via BleepingComputer·09:39 PM
Aug 22, 2024
Data Sourced
via MITRE·03:59 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-36795?
CVE-2024-36795 is considered a high-severity vulnerability due to insecure permissions that allow unauthorized access.
2
How do I fix CVE-2024-36795?
Currently, there is no official fix available for CVE-2024-36795, so users should take immediate measures to secure their devices.
3
What products are affected by CVE-2024-36795?
CVE-2024-36795 specifically affects Netgear WNR614 and JNR1010V2/N300 hardware devices.
4
What are the potential risks associated with CVE-2024-36795?
The risks include unauthorized access to sensitive URLs and directories within the router firmware.
5
Are there any workarounds for CVE-2024-36795?
Users can implement network security measures, such as disabling remote management and changing default passwords.