NETGEAR CBK43 Firmware vulnerabilities

3 CVEs affecting NETGEAR CBK43 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-28340, published 2024-03-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-27861, published 2021-02-12. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Orbi 2.5.1.16 routers. Authentication is not required to exploit this…
CVE-2024-28340, published 2024-03-12. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any…
CVE-2024-28339, published 2024-03-12. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any…