← Vulnerability feed

Vulnerability record · CVE-2024-30571 · published 3 April 2024

CVE-2024-30571: Netgear r6850 firmware information exposure vulnerability

Netgear · R6850 Firmware

An information leak in the BRS_top.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required.

7.5 CVSS 3.1 High EPSS 14% · top 3.6% CWE-200 · Information exposure
7.5CVSS 3.1 base score
14%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

An information leak in the BRS_top.html component of Netgear R6850 v1.1.0.88 allows attackers to obtain sensitive information without any authentication required.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/funny-mud-peee/IoT-vuls/blob/main/netgear%20R6850/Info%20Leak%20in%20Netgear-R6850%EF%BC%88BRS_top.ht ExploitThird Party Advisory
https://www.netgear.com/about/security/ Vendor Advisory
https://github.com/funny-mud-peee/IoT-vuls/blob/main/netgear%20R6850/Info%20Leak%20in%20Netgear-R6850%EF%BC%88BRS_top.ht ExploitThird Party Advisory
https://www.netgear.com/about/security/ Vendor Advisory

Track CVE-2024-30571 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-30568Netgear R6850 router command injection via c4-IPAddr parameterNetgear R6850 firmware 1.1.0.88 contains a command injection flaw reachable through the c4-IPAddr parameter. A remote, unauthenticated attacker can i…EPSS 47%analysed9.8CVE-2021-45644Netgear ac2100 firmware vulnerabilityCertain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.88, AC2400 before 1.2.0.88, AC…EPSS 1.1%9.8CVE-2021-45511Netgear ac2100 firmware vulnerabilityCertain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08…EPSS 18%9.8CVE-2021-45501Netgear ac2400 firmware vulnerabilityCertain NETGEAR devices are affected by authentication bypass. This affects AC2400 before 1.1.0.84, AC2600 before 1.1.0.84, D7000 before 1.0.1.82, R6…EPSS 1.9%9.8CVE-2021-38516Netgear d6220 firmware vulnerabilityCertain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 before 1.0.0.48, D6400 before 1.0.0.82, D700…EPSS 1.3%9.8CVE-2020-35795Netgear ac2100 firmware classic buffer overflow vulnerabilityCertain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72…EPSS 1.2%9.4CVE-2020-35800Netgear ac2100 firmware vulnerabilityCertain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC…EPSS 1.6%8.8CVE-2021-34865Netgear ac2100 firmware improper authentication vulnerabilityThis vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers. Authentication i…EPSS 3.1%

Source: NIST National Vulnerability Database (record CVE-2024-30571), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.