{"id":"CVE-2024-57046","aliases":["EUVD-2025-4658","GHSA-cg2m-239p-9xhp"],"status":"published","title":"A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits...","description":"A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authentication. When adding \"?x=1.gif\" to the the requested url, it will be recognized as passing the authentication.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.02107,"percentile":0.81912,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2025-02-18T00:00:00Z","modified":"2026-06-17T08:13:14Z","exploits":[{"source":"nuclei","id":"CVE-2024-57046","title":"Netgear DGN2200 - Improper Authentication","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57046.yaml"}],"products":[{"vendor":"netgear","product":"dgn2200_firmware"}],"references":[{"url":"https://www.netgear.com/about/security/","tags":["Vendor Advisory"]},{"url":"https://github.com/Shuanunio/CVE_Requests/blob/main/Netgear/DGN2200/ACL%20bypass%20Vulnerability%20in%20Netgear%20DGN2200.md","tags":["Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-57046"},{"url":"https://www.netgear.com/about/security"},{"url":"https://github.com/advisories/GHSA-cg2m-239p-9xhp"}],"sources":{"cve":[{"id":"CVE-2024-57046","description":"A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authentication. When adding \"?x=1.gif\" to the the requested url, it will be recognized as passing the authentication.","status":"published","published":"2025-02-18T00:00:00Z","modified":"2025-02-19T21:38:37.992Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:34:07.482552Z"}],"euvd":[{"id":"EUVD-2025-4658","description":"A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authentication. When adding \"?x=1.gif\" to the the requested url, it will be recognized as passing the authentication.","status":"published","published":"2025-02-18T00:00:00Z","modified":"2025-02-19T21:38:37Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:53:26.353093Z"}],"ghsa":[{"id":"GHSA-cg2m-239p-9xhp","title":"A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits...","description":"A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authentication. When adding \"?x=1.gif\" to the the requested url, it will be recognized as passing the authentication.","status":"published","published":"2025-02-18T15:31:08Z","modified":"2025-02-19T21:31:37Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:59:59.153661Z"}],"nvd":[{"id":"CVE-2024-57046","description":"A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authentication. When adding \"?x=1.gif\" to the the requested url, it will be recognized as passing the authentication.","status":"published","published":"2025-02-18T15:15:16.783Z","modified":"2026-06-17T08:13:14.41Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:10:44.508862Z"}]}}