CVE-2024-6646: Netgear WN604 Web Interface downloadFile.php information disclosure
A vulnerability was found in Netgear WN604 up to 20240710. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /downloadFile.php of the component Web Interface. The manipulation of the argument file with the input config leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271052. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6646?
CVE-2024-6646 is rated as problematic.
Which devices are affected by CVE-2024-6646?
CVE-2024-6646 affects Netgear WN604 devices with firmware versions up to 20240710.
How can I mitigate CVE-2024-6646?
To mitigate CVE-2024-6646, it is recommended to update the Netgear WN604 to the latest firmware version.
What does CVE-2024-6646 exploit?
CVE-2024-6646 exploits a vulnerability in the web interface of the Netgear WN604, specifically through the /downloadFile.php component.
What type of vulnerability is CVE-2024-6646?
CVE-2024-6646 is classified as a web interface vulnerability that allows unauthorized access to the configuration files.