CVE-2025-4978 in the critical feed json
Netgear DGND3700 Basic Authentication BRS_top.html improper authentication
published 2025-05-20 17 mo ago modified 2026-06-17 4 mo ago also EUVD-2025-15826
- cvss
- 9.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 21.6%
- EPSS 21.6% chance of exploitation in 30 days, percentile 97%
- public exploits
- 0
- none known
Summary
A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of the file /BRS_top.html of the component Basic Authentication. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- yes
- Technical impact
- total
- Assessed
- 17 mo ago
Exploit prediction
21.60% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- github.com https://github.com/at0de/my_vulns/blob/main/Netgear/DGND3700v2/backdoor.md referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 9.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| CNA | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| CNA | 4.0 | 9.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Affected products
- Netgear DGND3700
Classification
- Weakness
-
- CWE-287 Improper Authentication
References
-
github.com
/at0de/my_vulns/blob/main/Netgear/DGND3700v2/backdoor.md
exploit
-
vuldb.com
/?id.309639
vdb-entry, third-party-advisory
-
vuldb.com
/?ctiid.309639
signature, permissions-required, vdb-entry
-
vuldb.com
/?submit.564712
third-party-advisory, vdb-entry
-
netgear.com
/
product
Sources
- CVE List CVE-2025-4978
- NVD CVE-2025-4978
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.