CVE Feed

    Dashboard / CVE / CVE-2025-4978

    CVE-2025-4978

    A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of the file /BRS_top.html of the component Basic Authentication. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.

    Published:May 20, 2025
    Last Modified:Jun 12, 2025
    EPS:May 20, 2025
    EPSS Score:0.00975
    CVSS Score:9.8

    Affected Products

    Vendor
    Netgear
    Product
    Dgnd3700
    Vendor
    Netgear
    Product
    Dgnd3700 Firmware

    Exploits

    https://github.com/at0de/my_vulns/blob/main/Netgear/DGND3700v2/backdoor.mdhttps://github.com/at0de/my_vulns/blob/main/Netgear/DGND3700v2/backdoor.md

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Related CVEs

    CVE-2026-15757 (CVSS 6.3) — A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi netwo…
    CVE-2025-4980 (CVSS 6.9) — A vulnerability has been found in Netgear DGND3700 1.1.00.15_1.00.15NA and classified as problematic. This vul…
    CVE-2025-4977 (CVSS 6.9) — A vulnerability, which was classified as problematic, has been found in Netgear DGND3700 1.1.00.15_1.00.15NA. …
    CVE-2016-11059 (CVSS 7.5) — Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before…
    CVE-2019-17373 (CVSS 9.8) — Certain NETGEAR devices allow unauthenticated access to critical .cgi and .htm pages via a substring ending wi…
    CVE-2016-5649 (CVSS 9.8) — A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, an…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High