CVE Vulnerabilities

CVE-2024-36788

Published: Jun 07, 2024 | Modified: Nov 21, 2024
CVSS 3.x
4.8
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices.

Affected Software

Name Vendor Start Version End Version
Wnr614_firmware Netgear 1.1.0.54_1.0.1 (including) 1.1.0.54_1.0.1 (including)

References