Netgear WNR614 URL improper authentication

Vulnerability

The Netgear WNR614 router firmware version 1.1.0.28_1.0.1WW contains an authentication bypass vulnerability in the URL Handler component. By appending %00currentsetting.htm to a URL that normally requires authentication, the router incorrectly treats the request as authenticated, allowing access to restricted pages. This issue has been circulating as a zero-day since 2024 [1].

Exploitation

An unauthenticated remote attacker can exploit this by sending a crafted HTTP request to the router. For example, accessing http://target/*.htm%00currentsetting.htm bypasses the login prompt and displays the page content without authentication. No special privileges or user interaction is required [1].

Impact

Successful exploitation allows an attacker to view sensitive configuration pages and potentially modify settings, leading to full compromise of the router's administrative interface. This could result in information disclosure, network manipulation, and further attacks on connected devices [1].

Mitigation

As of the publication date (2025-06-03), no official patch has been released by Netgear. The vendor's website [2] does not list a fixed version. Users should consider replacing the device if it is end-of-life, or implement network-level access controls to restrict management interface exposure. The vulnerability is publicly known and may be exploited [1].