Authentication Bypass Vulnerability in Netcore Device Configuration

CVE-2025-3759

What is CVE-2025-3759?

The vulnerability allows unauthorized access to the configuration endpoint at /cgi-bin-igd/netcore_set.cgi, enabling attackers to alter device settings without authentication. This vulnerability can lead to severe security breaches including the hijacking of administrator accounts and unauthorized changes to wireless access point passwords. Immediate attention is required to protect affected devices from potential exploitation.

References