CVE-2024-28339

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p36

Published

Mar 12, 2024 (Mar 12, 2024)

Modified

Jun 17, 2026

Description

An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required.

Vendors: netgear
Products: cbk40 firmware, cbr40 firmware, cbk43 firmware
Weakness: CWE-200
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.