CVE-2024-36790

Vulnerability

The Netgear WNR614 router running firmware version JNR1010V2/N300-V1.1.0.54_1.0.1 stores administrative credentials in plaintext within the device's web management interface. This vulnerability is part of a cluster of unpatched security issues affecting the device, which is approaching end-of-life status [1]. No authentication is required to access the stored credentials if an attacker can reach the management interface.

Exploitation

An attacker on the same local network can access the router's management interface and retrieve the plaintext administrative credentials without any prior authentication. The credentials are stored in a readable format and can be extracted directly from the interface or through network traffic analysis [1]. The attack does not require user interaction or any special privileges beyond network access.

Impact

Successful exploitation grants the attacker full administrative control over the router. This enables them to modify network settings, intercept traffic, perform man-in-the-middle attacks, and potentially compromise all devices connected to the network. The plaintext storage of credentials also increases the risk of credential reuse attacks against other services [1].

Mitigation

Netgear has not released a patch for this vulnerability, and the device is considered end-of-life with no further firmware updates expected [1]. The only effective mitigation is to replace the router with a supported model that receives security updates. As a workaround, users should disable remote management and ensure the management interface is not exposed to the internet. Additionally, changing the default credentials and monitoring for unauthorized access can reduce risk, but does not eliminate the underlying vulnerability.