CVE-2025-4978CWE-287

Netgear DGND3700 Basic Authentication BRS_top.html improper authentication

Critical · published May 20, 2025

CVSS v4.0
9.3
EPSS
21%
Percentile
97.6
In the wild
Unconfirmed
What it is

🚨 A critical vulnerability in Netgear DGND3700 could leave your network open to unauthorized access — and it’s as sneaky as a cat burglar! 🔥 Think of this vulnerability like a poorly secured hotel room where anyone with a keycard can waltz in and steal your belongings. If an attacker figures out how to manipulate the authentication, they can gain entry without you ever knowing. An attacker could potentially bypass authentication measures, allowing them to access sensitive configurations or even take control of your network device. This could lead to unauthorized data access or manipulation, leaving your entire home network vulnerable to further attacks.

Put simply

Think of this vulnerability like a poorly secured hotel room where anyone with a keycard can waltz in and steal your belongings. If an attacker figures out how to manipulate the authentication, they can gain entry without you ever knowing. This flaw exists in the Basic Authentication component within the file /BRS_top.html. By exploiting improper authentication, an attacker may initiate remote attacks without needing legitimate credentials.

What to do

An attacker could potentially bypass authentication measures, allowing them to access sensitive configurations or even take control of your network device. This could lead to unauthorized data access or manipulation, leaving your entire home network vulnerable to further attacks. To safeguard your network, update the Netgear DGND3700 firmware to the latest available version immediately. Ensure you change default passwords and implement network monitoring to detect any unauthorized access attempts. You’ve got this! By taking these steps, you’ll boost your network's defenses and keep those digital intruders at bay. 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.21423 · 97.6th percentile
Weakness
CWE-287 · Improper Authentication
Published
2025-05-20T13:00Z
EPSS history
Timeline
  • 20 MAY 13:00Z
    Netgear DGND3700 Basic Authentication BRS_top.html improper authentication
    cvelistv5