CVE-2025-4978

CVE-2025-4978 is an improper authentication flaw (CWE-287) in the Basic Authentication component of the Netgear DGND3700 router firmware, triggered via the file /BRS_top.html. An unauthenticated remote attacker can manipulate requests to this endpoint to bypass authentication on the router's web management interface. Successful exploitation would give the attacker administrative access to the device's web UI, with high impact on confidentiality, integrity, and availability (CVSS 4.0: 9.3). Affected are Netgear DGND3700 units running firmware 1.1.00.15_1.00.15NA; the publicly available proof of concept references the DGND3700v2 variant as well, and other Netgear products may also be affected. The exploit is public and the vendor was notified in advance of disclosure; there is no confirmed in-the-wild exploitation yet, but EPSS assigns a 21% probability of exploitation within 30 days (97th percentile).

What to do: Check whether your DGND3700 runs firmware 1.1.00.15_1.00.15NA and upgrade to the latest firmware available on Netgear's support page if a fixed release is offered. Until then, disable or restrict remote (WAN) web management and limit access to the admin interface to the LAN. Because the public PoC also references the DGND3700v2, owners of that variant should verify their firmware and apply the same mitigations.