CVE-2025-4977mediumCWE-200CWE-284

CVE-2025-4977: medium-severity vulnerability in Netgear DGND3700

Netgear DGND3700 BRS_top.html information disclosure

Published

Follow this CVE+ Monitor DGND3700

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.7%
A vulnerability, which was classified as problematic, has been found in Netgear DGND3700 1.1.00.15_1.00.15NA. Affected by this issue is some unknown functionality of the file /BRS_top.html. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Netgear · DGND3700
Related CVEs — Netgear DGND3700

In the same product, most dangerous first.

CVE-2016-5649—Netgear DGN2200 and DGND3700 disclose the administrator passwordEPSS 23.6%CVE-2025-4978CRITICALNetgear DGND3700 Basic Authentication BRS_top.html improper authenticationEPSS 21.6%CVE-2025-4980MEDIUMNetgear DGND3700 mini_http currentsetting.htm information disclosureEPSS 0.7%