| 标题 | Netgear DGND3700v2 V1.1.00.15_1.00.15NA Backdoor |
|---|
| 描述 | A backdoor authentication bypass vulnerability exists in the NETGEAR DGND3700v2 router (firmware V1.1.00.15_1.00.15NA). By accessing the unauthenticated endpoint /BRS_top.html, the internal flag start_in_blankstate is set to 1, which disables HTTP Basic Authentication checks. As a result, an attacker can bypass login and gain full access to the device management interface without valid credentials. |
|---|
| 来源 | ⚠️ https://github.com/at0de/my_vulns/blob/main/Netgear/DGND3700v2/backdoor.md |
|---|
| 用户 | 153528990 (UID 64409) |
|---|
| 提交 | 2025-04-24 08時14分 (1 年前) |
|---|
| 管理 | 2025-05-20 08時03分 (26 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 309639 [Netgear DGND3700 1.1.00.15_1.00.15NA Basic Authentication /BRS_top.html 弱身份验证] |
|---|
| 积分 | 20 |
|---|