← Vulnerability feed

Vulnerability record · CVE-2025-5495 · published 3 June 2025

CVE-2025-5495: Netgear wnr614 firmware improper authentication vulnerability

Netgear · Wnr614 Firmware

A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW. It has been classified as critical. This affects an unknown part of the component URL Handler. The manipulation with the input %00currentsetting.htm leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This issue appears to have been circulating as an 0day since 2024.

6.9 CVSS 4.0 Medium EPSS 0.95% · top 39.8% CWE-287 · Improper authentication
6.9CVSS 4.0 base score, v2 7.5
0.95%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW. It has been classified as critical. This affects an unknown part of the component URL Handler. The manipulation with the input %00currentsetting.htm leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This issue appears to have been circulating as an 0day since 2024.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/Shuanunio/CVE_Requests/blob/main/Netgear/WNR614/ACL%20bypass%20Vulnerability%20in%20Netgear%20WNR614. ExploitThird Party Advisory
https://vuldb.com/?ctiid.310911 Permissions RequiredVDB Entry
https://vuldb.com/?id.310911 Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.584939 Third Party AdvisoryVDB Entry
https://www.netgear.com/ Product
https://github.com/Shuanunio/CVE_Requests/blob/main/Netgear/WNR614/ACL%20bypass%20Vulnerability%20in%20Netgear%20WNR614. ExploitThird Party Advisory

Track CVE-2025-5495 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2016-10174NETGEAR router buffer overflow in hidden_lang_avi parameterThe NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. An unauth…KEVEPSS 83%analysed8.8CVE-2024-36787Netgear wnr614 firmware vulnerabilityAn issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass authentication and access the administrative interface via unspe…EPSS 0.57%8.8CVE-2024-36790Netgear wnr614 firmware cleartext storage of sensitive data vulnerabilityNetgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plaintext.EPSS 0.35%8.8CVE-2017-18791Netgear r6050 firmware cross-site request forgery vulnerabilityCertain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 before 1.1.0.50, WNDR3700v5 bef…EPSS 0.46%8.8CVE-2019-20690Netgear d6200 firmware vulnerabilityCertain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.30, D7000 before 1.0.1.66, R6020 before 1.0.0.34, R60…EPSS 0.57%8.2CVE-2024-36792Netgear wnr614 firmware vulnerabilityAn issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain access to the router's pin.EPSS 0.29%8.1CVE-2024-36789Netgear wnr614 firmware weak password requirements vulnerabilityAn issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create passwords that do not conform to defined security standards.EPSS 0.40%7.5CVE-2016-11057Netgear jnr1010 firmware improper authentication vulnerabilityCertain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618…EPSS 1.0%

Source: NIST National Vulnerability Database (record CVE-2025-5495), CISA KEV, FIRST EPSS (scores of 2026-10-13). This page is refreshed as NVD updates the record.