CVE-2024-28340: Netgear CBR40 · Information Exposure
Source CVE Database V5
Not known to be exploited · CVSS 7.5 High.
Data as of 26 Oct 2026, 17:16 UTC
- EPSS
- 0.6% chance of exploitation in 30 days – higher than 50% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 12 Mar 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
- Monitor Netgear’s official channels for firmware updates addressing CVE-2024-28340 and apply patches immediately upon release.
- Until patches are available, restrict access to the affected devices’ management interfaces by implementing network segmentation and firewall rules to limit exposure to trusted networks only.
- Disable remote management features if not required to reduce the attack surface.
- Employ network intrusion detection and prevention systems (IDS/IPS) to monitor for suspicious access attempts targeting the currentsetting.htm resource.
- Conduct regular audits of router configurations and logs to detect any unauthorized access or anomalous activity.
- Consider replacing affected devices with models that have a better security track record if timely patching is not feasible.
- Educate network administrators about this vulnerability and the importance of securing router management interfaces.
- Use VPNs or other secure channels for remote management to add an additional layer of authentication and encryption.
Description
An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required.