GCVE - cpe:2.3:h:netgear:cbk43:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:netgear:cbk43:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Netgear (`99700297-c207-56f4-abd0-97ab0c8bf3ab`)
Product	Cbk43 (`5df91559-c0e1-5732-b712-5c774cbee852`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-28340`	not_vulnerable	2026-06-08 06:33:26.916707	Details available An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required. Published: 2024-03-12T00:00:00.000Z Updated: 2024-08-21T15:27:42.129Z Open on db.gcve.eu Reference links https://www.netgear.com/about/security/ https://github.com/funny-mud-peee/IoT-vuls/blob/main/Netgear%20CBR40%5CCBK40%5CCBK43/Info%20Leak%20in%20Netgear-CBR40%E3%80%81CBK40%E3%80%81CBK43%20Router%EF%BC%88currentsetting.htm%EF%BC%89.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-28339`	not_vulnerable	2026-06-08 06:33:26.914423	Details available An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required. Published: 2024-03-12T00:00:00.000Z Updated: 2024-08-28T13:46:30.889Z Open on db.gcve.eu Reference links https://www.netgear.com/about/security/ https://github.com/funny-mud-peee/IoT-vuls/blob/main/Netgear%20CBR40%5CCBK40%5CCBK43/Info%20Leak%20in%20Netgear-CBR40%E3%80%81CBK40%E3%80%81CBK43%20Router%EF%BC%88debuginfo.htm%EF%BC%89.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-27861`	not_vulnerable	2026-06-08 05:23:53.353289	Details available HIGH (8.8) This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UA_Parser utility. A crafted Host Name option in a DHCP request can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11076. Published: 2021-02-11T23:35:36.000Z Updated: 2024-08-04T16:25:43.503Z Open on db.gcve.eu Reference links https://www.zerodayinitiative.com/advisories/ZDI-20-1430/ https://kb.netgear.com/000062507/Security-Advisory-for-Unauthenticated-Command-Injection-Vulnerability-on-Some-Extenders-and-Orbi-WiFi-Systems	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.