← Back

Cbk43 Firmware

cbk43_firmware

Vendor: Netgear • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-28340
1Netgear
3Cbk40 Firmware
Cbk43 FirmwareCbr40 Firmware
May 27, 2025
Mar 12, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required.
CVE-2024-28339
1Netgear
3Cbk40 Firmware
Cbk43 FirmwareCbr40 Firmware
May 27, 2025
Mar 12, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required.
CVE-2020-27861
1Netgear
39Cbk40 Firmware
Cbk43 FirmwareCbr40 Firmware+36 more
Nov 21, 2024
Feb 12, 2021
N/A· v4
8.8 HIGH· v3
8.3 HIGH· v2
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this vulnerability. The specific flaw e...Show more
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UA_Parser utility. A crafted Host Name option in a DHCP request can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11076.Show less