CVE-2025-4980: Netgear DGND3700 mini_http currentsetting.htm information disclosure
A vulnerability has been found in Netgear DGND3700 1.1.00.151.00.15NA and classified as problematic. This vulnerability affects unknown code of the file /currentsetting.htm of the component minihttp. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4980?
CVE-2025-4980 is classified as a problematic vulnerability that can lead to information disclosure.
How does CVE-2025-4980 affect Netgear DGND3700?
CVE-2025-4980 affects the /currentsetting.htm file of the mini_http component in the Netgear DGND3700 router.
What type of attack can exploit CVE-2025-4980?
The vulnerability allows remote attackers to initiate an information disclosure attack.
Can CVE-2025-4980 be exploited without authentication?
Yes, CVE-2025-4980 can potentially be exploited remotely without prior authentication.
What are the potential consequences of CVE-2025-4980?
Exploitation of CVE-2025-4980 may lead to unauthorized access to sensitive information from the Netgear DGND3700.