Netgear WN604 Web Interface downloadFile.php information disclosure

published 2024-07-10 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-47704

cvss: 5.3; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 45.7%; EPSS 45.7% chance of exploitation in 30 days, percentile 98%
public exploits: 0; none known, plus a Nuclei check

A vulnerability was found in Netgear WN604 up to 20240710. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /downloadFile.php of the component Web Interface. The manipulation of the argument file with the input config leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-271052. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Patch / fix

fixed in 1

Netgear WN604 20240710

CISA SSVC

Exploitation: Proof of concept is public
Automatable: yes
Technical impact: partial
Assessed: 2 y ago (2024-07-10)

Exploit prediction

45.68% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

Nuclei template Netgear-WN604 downloadFile.php - Information Disclosure nuclei detection template
github.com https://github.com/mikutool/vul/issues/1 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	4.0	6.9	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
CNA	3.1	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CNA	3.0	5.3	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CNA	2.0	5.0	AV:N/AC:L/Au:N/C:P/I:N/A:N
CNA	4.0	6.9	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

Netgear WN604

Classification

Weakness

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

github.com /mikutool/vul/issues/1
exploit, issue-tracking
vuldb.com /?id.271052
vdb-entry, technical-description
vuldb.com /?ctiid.271052
signature, permissions-required
vuldb.com /?submit.367382
third-party-advisory

Sources

CVE List CVE-2024-6646
NVD CVE-2024-6646

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary