Vulnerability · Published Apr 26, 2024 · Assigned by VulDB

CVE-2024-4235Netgear DG834Gv5 Web Management Interface cleartext storage

Low 2.7

In plain English

A low-severity security flaw in DG834Gv5 from Netgear. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).

Severity (CVSS 3.1)2.7Low

Exploit odds (30 days)0.6%top 53.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability classified as problematic was found in Netgear DG834Gv5 1.6.01.34. This vulnerability affects unknown code of the component Web Management Interface. The manipulation leads to cleartext storage of sensitive information. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-262126 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
Netgear	DG834Gv5	1.6.01.34

Weakness: CWE-312 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

References

VDB-262126 | Netgear DG834Gv5 Web Management Interface cleartext storage vdb-entry
VDB-262126 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
Submit #319148 | Netgear DG834Gv5 Router V6.00.25, V1.6.01.34 Unprotected Storage of Credentials third-party-advisory
https://netsecfish.notion.site/Netgear-DG834Gv5-Plain-Text-Credentials-Exposure-22e94fe066014490bebd349775d10b27?pvs=4 exploit