CVE Feed

    Dashboard / CVE / CVE-2024-36788

    CVE-2024-36788

    Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices.

    Published:Jun 7, 2024
    Last Modified:Feb 13, 2025
    EPS:Jun 7, 2024
    EPSS Score:0.00052
    CVSS Score:5.9

    Affected Products

    Vendor
    Netgear
    Product
    Wnr614
    Vendor
    Netgear
    Product
    Wnr614 Firmware

    Exploits

    https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-netgear-wnr614-router/https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-netgear-wnr614-router/

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-5495 (CVSS 6.9) — A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW. It has been classified as critical. This affects…
    CVE-2024-36790 (CVSS 8.8) — Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plaintext.…
    CVE-2024-36789 (CVSS 8.1) — An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create passwords that do not con…
    CVE-2024-36787 (CVSS 8.8) — An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass authentication and access…
    CVE-2024-36792 (CVSS 8.2) — An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to…
    CVE-2024-36795 (CVSS 4) — Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to access URLs and dire…
    CVE-2016-11057 (CVSS 7.5) — Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-…
    CVE-2017-18791 (CVSS 8.8) — Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17…
    CVE-2019-20690 (CVSS 8.8) — Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.30, D7000 befo…
    CVE-2016-10174 (CVSS 9.8) — The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High