Description
Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices.
Scores
CVSS v3
4.8
EPSS
0.0009
EPSS Percentile
25.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-922
Status
published
Products (1)
netgear/wnr614_firmware
1.1.0.54_1.0.1
Published
Jun 07, 2024
Tracked Since
Feb 18, 2026