CVE-2025-4977

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, has been found in Netgear DGND3700 1.1.00.15_1.00.15NA. Affected by this issue is some unknown functionality of the file /BRS_top.html. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200 CWE-284

Affected software

Vendor	Product	Versions
Netgear	DGND3700	1.1.00.15_1.00.15NA

References

https://github.com/at0de/my_vulns/blob/main/Netgear/DGND3700v2/BRS_top.mdExploit
https://vuldb.com/?ctiid.309638Permissions Required, VDB Entry
https://vuldb.com/?id.309638Third Party Advisory, VDB Entry
https://vuldb.com/?submit.564711Third Party Advisory, VDB Entry
https://www.netgear.com/Product
https://github.com/at0de/my_vulns/blob/main/Netgear/DGND3700v2/BRS_top.mdExploit

Timeline

Published: May 20, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-49789.8A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of t CVE-2025-497847.2An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 throug CVE-2025-49797.5An issue has been discovered in GitLab CE/EE affecting all versions before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. An attacke CVE-2025-497949.1A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML CVE-2025-497957.5A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a CVE-2025-497969.1A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. Th CVE-2025-497978.5Multiple Brother driver installers for Windows contain a privilege escalation vulnerability. If exploited, an arbitrary program may be execu CVE-2025-49805.3A vulnerability has been found in Netgear DGND3700 1.1.00.15_1.00.15NA and classified as problematic. This vulnerability affects unknown cod CVE-2025-498097.8mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable. NOTE: CVE-2025-49819.9Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to sanitize filenames in CVE-2025-498104.3Mattermost versions 10.5.x <= 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts CVE-2025-498127.4In some mod_ssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle