Netgear WNR614 Improper Authentication Vulnerability

A critical vulnerability exists in the Netgear WNR614 router, specifically in version 1.1.0.28_1.0.1WW. This vulnerability allows remote attackers to bypass authentication by manipulating the URL with a specific input, leading to unauthorized access. The issue has been publicly disclosed and is being actively exploited.

Impact

Exploitation of this vulnerability allows for unauthorized access by bypassing authentication requirements, potentially leading to unauthorized actions or access to sensitive information.

Reproduction

To reproduce this vulnerability, send a request to the router's URL with the input '%00currentsetting.htm' appended. This will be processed as a valid authentication, bypassing any login requirements.