← Vulnerability feed

Vulnerability record · CVE-2024-36788 · published 7 June 2024

CVE-2024-36788: Netgear wnr614 firmware vulnerability

Netgear · Wnr614 Firmware

Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices.

4.8 CVSS 3.1 Medium EPSS 0.27% · top 82.4% CWE-922 · CWE-922
4.8CVSS 3.1 base score
0.27%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-netgear-wnr614-router/ ExploitThird Party Advisory
https://redfoxsec.com/blog/security-advisory-multiple-vulnerabilities-in-netgear-wnr614-router/ ExploitThird Party Advisory

Track CVE-2024-36788 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2016-10174NETGEAR router buffer overflow in hidden_lang_avi parameterThe NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. An unauth…KEVEPSS 83%analysed8.8CVE-2024-36790Netgear wnr614 firmware cleartext storage of sensitive data vulnerabilityNetgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plaintext.EPSS 0.35%8.8CVE-2024-36787Netgear wnr614 firmware vulnerabilityAn issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass authentication and access the administrative interface via unspe…EPSS 0.57%8.8CVE-2017-18791Netgear r6050 firmware cross-site request forgery vulnerabilityCertain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 before 1.1.0.50, WNDR3700v5 bef…EPSS 0.46%8.8CVE-2019-20690Netgear d6200 firmware vulnerabilityCertain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.30, D7000 before 1.0.1.66, R6020 before 1.0.0.34, R60…EPSS 0.57%8.2CVE-2024-36792Netgear wnr614 firmware vulnerabilityAn issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain access to the router's pin.EPSS 0.29%8.1CVE-2024-36789Netgear wnr614 firmware weak password requirements vulnerabilityAn issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create passwords that do not conform to defined security standards.EPSS 0.40%7.5CVE-2016-11057Netgear jnr1010 firmware improper authentication vulnerabilityCertain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618…EPSS 1.0%

Source: NIST National Vulnerability Database (record CVE-2024-36788), CISA KEV, FIRST EPSS (scores of 2026-10-15). This page is refreshed as NVD updates the record.