CVE-2025-5495 Netgear WNR614 URL improper authentication
Remote attackers can bypass authentication on Netgear WNR614 routers by manipulating URL inputs, potentially gaining unauthorized access to device settings.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-5495?
CVE-2025-5495 is a medium-severity authentication bypass vulnerability in Netgear WNR614, published on 3 Jun 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW. It has been classified as critical. This affects an unknown part of the component URL Handler. The manipulation with the input %00currentsetting.htm leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This issue appears to have been circulating as an 0day since 2024.
Weakness: CWE-287
Which versions are affected by CVE-2025-5495?
It affects 1 product.
Products include Netgear Wnr614 Firmware.
How do I fix CVE-2025-5495?
No fix has been published for CVE-2025-5495 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2025-5495 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-5495 exists.
Other vulnerabilities in Netgear WNR614
Sources
Also known as GHSA-fxhf-2c5f-jh3q.