[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2V7I_Q3HAiPEaZTelNwt6i5bGttulzglXYDeSPwvnD4":3,"g5a-risk:CVE-2025-4978":148},{"success":4,"data":5,"meta":146},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":43,"affectedProducts":44,"affectedProductsCount":54,"references":55,"referencesCount":81,"weaknesses":82,"weaknessesCount":90,"isActivelyExploited":39,"cisaInfo":27,"otxData":27,"relatedBlogPosts":91,"seoMetadata":92,"configurations":117,"relatedVendorCves":130,"notableEvents":131},"CVE-2025-4978","What is CVE-2025-4978?","A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of the file \u002FBRS_top.html of the component Basic Authentication. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.","A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of the file \u002FBRS_top....","2025-05-20T13:15:48.68","2025-06-12T16:22:12.217",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"cna@vuldb.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[],[32],{"Source":17,"Type":18,"CVSSData":33,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":37,"ACInsufInfo":39,"ObtainAllPrivilege":39,"ObtainUserPrivilege":39,"ObtainOtherPrivilege":39,"UserInteractionRequired":39},{"Version":34,"VectorString":35,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":38,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",10,"",false,0.21423,[42,42,42,42,40,40,40],0.20955,"Critical",[45,50],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"netgear","dgnd3700_firmware","1.1.00.15_1.00.15na","cpe:2.3:o:netgear:dgnd3700_firmware:1.1.00.15_1.00.15na:*:*:*:*:*:*:*",{"vendor":46,"product":51,"version":52,"criteria":53,"vulnerable":39},"dgnd3700","v2","cpe:2.3:h:netgear:dgnd3700:v2:*:*:*:*:*:*:*",2,[56,61,67,71,74,79],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fgithub.com\u002Fat0de\u002Fmy_vulns\u002Fblob\u002Fmain\u002FNetgear\u002FDGND3700v2\u002Fbackdoor.md","GitHub",[60],"Exploit",{"url":62,"source":63,"tags":64},"https:\u002F\u002Fvuldb.com\u002F?ctiid.309639","Vuldb",[65,66],"Permissions Required","VDB Entry",{"url":68,"source":63,"tags":69},"https:\u002F\u002Fvuldb.com\u002F?id.309639",[70,66],"Third Party Advisory",{"url":72,"source":63,"tags":73},"https:\u002F\u002Fvuldb.com\u002F?submit.564712",[70,66],{"url":75,"source":76,"tags":77},"https:\u002F\u002Fwww.netgear.com\u002F","Netgear",[78],"Product",{"url":57,"source":58,"tags":80},[60],6,[83],{"id":84,"name":85,"description":86,"extendedDescription":38,"status":87,"abstraction":88,"structure":89},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Draft","Class","Simple",1,[],{"title":93,"metaDescription":94,"keywords":95,"canonicalUrl":96,"structuredData":97},"What is CVE-2025-4978? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-4978, a critical severity cyber security vulnerability from 2025. A vulnerability, which was classified as very critical, ...","CVE-2025-4978, CVE-2025-4978 vulnerability, CVE-2025-4978 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, netgear security, dgnd3700_firmware vulnerability, dgnd3700 vulnerability","\u002Fwhat-is\u002Fcve-2025-4978",{"@context":98,"@type":99,"headline":93,"description":94,"datePublished":10,"dateModified":11,"author":100,"publisher":104,"about":108,"mainEntityOfPage":112,"articleSection":115,"keywords":116},"https:\u002F\u002Fschema.org","TechArticle",{"@type":101,"name":102,"url":103},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":101,"name":102,"url":103,"logo":105},{"@type":106,"url":107},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":109,"name":6,"description":110,"additionalType":111},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":113,"@id":114},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-4978","Cybersecurity","CVE-2025-4978, CVE-2025-4978 vulnerability, CVE-2025-4978 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[118],{"Operator":119,"Negate":27,"Nodes":120},"AND",[121,126],{"Operator":122,"Negate":39,"CPEMatch":123},"OR",[124],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":125,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"3CE829A1-EC2E-47B3-8F03-9C834ED3E5B5",{"Operator":122,"Negate":39,"CPEMatch":127},[128],{"Vulnerable":39,"Criteria":53,"MatchCriteriaID":129,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7A8F0B8E-D3F2-43C9-8B12-43DE4226E826",[],[132,139],{"id":133,"eventType":134,"eventTime":135,"details":136,"label":137,"color":138},"b2780d9a-9fe3-4ff6-8d9f-ec8b1c1d3bbd","NEW_NVD","2025-06-09T22:28:47.580323+00:00","New CVE added to NVD","Published to NVD","blue",{"id":140,"eventType":141,"eventTime":142,"details":143,"label":144,"color":145},"ddf03e6d-5d60-4aeb-ba48-caff698d5626","HIGH_EPSS_DELTA","2026-06-16T04:04:07.909309+00:00","Daily EPSS score increased by 0.143 on 2025-05-24","EPSS Score Increased","red",{"lastModified":11,"cacheTime":147,"version":34},1792453391019,{"score":149,"band":150,"action":151,"scoredAt":152},57,"Medium","Plan remediation","2026-10-16T07:07:21.622083+00:00"]