CVE-2024-7153
Last modified
CVE-2024-7153 is a medium-severity vulnerability rated 6.9/10 on the CVSS scale. A vulnerability classified as problematic has been found in Netgear WN604 up to 20240719. Affected is an unknown function of the file siteSurvey.php. EPSS estimates a 0.49% chance of exploitation in the next 30 days.
Description
A vulnerability classified as problematic has been found in Netgear WN604 up to 20240719. Affected is an unknown function of the file siteSurvey.php. The manipulation leads to direct request. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272556. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-7153?
How severe is CVE-2024-7153?
How do I fix CVE-2024-7153?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-7146The JetTabs for Elementor plugin for WordPress is vulnerable…8.8
- CVE-2024-7147The JetBlocks for Elementor plugin for WordPress is vulnerab…6.4
- CVE-2024-7149The Event Manager, Events Calendar, Tickets, Registrations –…8.8
- CVE-2024-7150The Slider by 10Web – Responsive Image Slider plugin for Wor…8.8
- CVE-2024-7151A vulnerability was found in Tenda O3 1.0.0.10(2478). It has…9.8
- CVE-2024-7152A vulnerability was found in Tenda O3 1.0.0.10(2478). It has…8.8
- CVE-2024-7154A vulnerability, which was classified as problematic, was fo…7.5
- CVE-2024-7155A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.5…4.7
- CVE-2024-7156A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20…7.5
- CVE-2024-7157A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B2…8.8
- CVE-2024-7158A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050_B2…8.8
- CVE-2024-7159A vulnerability was found in TOTOLINK A3600R 4.1.2cu.5182_B2…8.8
Are you affected by CVE-2024-7153?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST