Attackers Can Access URLs and Directories Embedded Within Firmware via Unspecified Vectors

CVE-2024-36795

What is CVE-2024-36795?

An insecure permissions issue in specific Netgear router models allows attackers to gain unauthorized access to URLs and directories embedded within the router's firmware. This vulnerability can potentially expose sensitive information and lead to further exploitation of the affected devices, making it crucial for users to secure their routers promptly and apply necessary updates. The issue arises from improperly configured permissions, allowing for unintended access that malicious actors could leverage.

References