PT-2024-4574 · NetGear · Netgear Dg834Gv5

Netsecfish

·

Published

2024-04-08

·

Updated

2025-11-20

·

CVE-2024-4235

CVSS v3.1

4.9

Medium

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Netgear DG834Gv5 version 1.6.01.34
Description: A vulnerability was found in the Web Management Interface of the Netgear DG834Gv5, which leads to cleartext storage of sensitive information. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This issue is related to the storage of critical information in an unencrypted manner, allowing a remote attacker to disclose protected information.
Recommendations: For Netgear DG834Gv5 version 1.6.01.34, as a temporary workaround, consider restricting access to the Web Management Interface until a patch is available. Avoid using the Web Management Interface for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Cleartext Storage of Sensitive Information

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-310CWE-312

Related Identifiers

BDU:2024-05080
CVE-2024-4235

Affected Products

Netgear Dg834Gv5