CVE-2024-30569

HIGH NUCLEI

Netgear R6850 Firmware - Information Disclosure

Title source: rule

Description

An information leak in currentsetting.htm of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required.

Nuclei Templates (1)

Netgear R6850 - Information Disclosure

HIGHVERIFIEDby ritikchaddha

FOFA: app="NETGEAR" && "R6850"

References (2)

[Exploit, Third Party Advisory] https://github.com/funny-mud-peee/IoT-vuls/blob/main/netgear%20R6850/Info%20Leak%20in%20Netgear-R6850%EF%BC%88currentsetting.htm%EF%BC%89.md

View Exploit ZIP pw:eip

[Vendor Advisory] https://www.netgear.com/about/security/

Scores

CVSS v3 7.5

EPSS 0.2629

EPSS Percentile 96.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-200

Status published

Products (1)

netgear/r6850_firmware 1.1.0.88

Published Apr 03, 2024

Tracked Since Feb 18, 2026