Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-36788

Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices.

Published

2024-06-07T15:15:50.233

Last Modified

2024-11-21T09:22:38.030

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.8 (MEDIUM)

Weaknesses

Type: Primary
NVD-CWE-Other
Type: Secondary
CWE-922

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	netgear	wnr614_firmware	1.1.0.54_1.0.1	Yes
Hardware	netgear	wnr614	-	No

References

https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-netgear-wnr614-router/ Exploit, Third Party Advisory ([email protected])
https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-netgear-wnr614-router/ Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)