[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fC1PdNrhlWwpYDQRtWfDPDUBRy52zoxISbFT232qKC3Y":3,"g5a-risk:CVE-2025-4980":150},{"success":4,"data":5,"meta":148},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":42,"epssPercentile":26,"epssTimeSeries":43,"severity":45,"affectedProducts":46,"affectedProductsCount":56,"references":57,"referencesCount":83,"weaknesses":84,"weaknessesCount":56,"isActivelyExploited":41,"cisaInfo":26,"otxData":26,"relatedBlogPosts":100,"seoMetadata":101,"configurations":126,"relatedVendorCves":139,"notableEvents":140},"CVE-2025-4980","What is CVE-2025-4980?","A vulnerability has been found in Netgear DGND3700 1.1.00.15_1.00.15NA and classified as problematic. This vulnerability affects unknown code of the file \u002Fcurrentsetting.htm of the component mini_http. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.","A vulnerability has been found in Netgear DGND3700 1.1.00.15_1.00.15NA and classified as problematic. This vulnerability affects unknown code of the file \u002Fcu...","2025-05-20T14:15:52.18","2025-06-12T16:21:08.95",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"cna@vuldb.com","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,[],[31],{"Source":17,"Type":32,"CVSSData":33,"BaseSeverity":25,"ExploitabilityScore":39,"ImpactScore":40,"ACInsufInfo":41,"ObtainAllPrivilege":41,"ObtainUserPrivilege":41,"ObtainOtherPrivilege":41,"UserInteractionRequired":41},"Secondary",{"Version":34,"VectorString":35,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":36,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":37,"BaseSeverity":38,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"",10,2.9,false,0.00665,[44,44,44,44,42,42,42],0.00625,"Medium",[47,52],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"netgear","dgnd3700_firmware","1.1.00.15_1.00.15na","cpe:2.3:o:netgear:dgnd3700_firmware:1.1.00.15_1.00.15na:*:*:*:*:*:*:*",{"vendor":48,"product":53,"version":54,"criteria":55,"vulnerable":41},"dgnd3700","v2","cpe:2.3:h:netgear:dgnd3700:v2:*:*:*:*:*:*:*",2,[58,63,69,73,76,81],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fgithub.com\u002Fat0de\u002Fmy_vulns\u002Fblob\u002Fmain\u002FNetgear\u002FDGND3700v2\u002Fcurrentsetting.md","GitHub",[62],"Exploit",{"url":64,"source":65,"tags":66},"https:\u002F\u002Fvuldb.com\u002F?ctiid.309640","Vuldb",[67,68],"Permissions Required","VDB Entry",{"url":70,"source":65,"tags":71},"https:\u002F\u002Fvuldb.com\u002F?id.309640",[72,68],"Third Party Advisory",{"url":74,"source":65,"tags":75},"https:\u002F\u002Fvuldb.com\u002F?submit.564714",[72,68],{"url":77,"source":78,"tags":79},"https:\u002F\u002Fwww.netgear.com\u002F","Netgear",[80],"Product",{"url":59,"source":60,"tags":82},[62],6,[85,93],{"id":86,"name":87,"description":88,"extendedDescription":89,"status":90,"abstraction":91,"structure":92},"CWE-200","Exposure of Sensitive Information to an Unauthorized Actor","The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","There are many different kinds of mistakes that introduce information exposures. The severity of the error can range widely, depending on the context in which the product operates, the type of sensitive information that is revealed, and the benefits it may provide to an attacker.  Some kinds of sensitive information include:\nInformation might be sensitive to different parties, each of which may have their own expectations for whether the information should be protected.  These parties include:\nInformation exposures can occur in different ways:\nIt is common practice to describe any loss of confidentiality as an \"information exposure,\" but this can lead to overuse of CWE-200 in CWE mapping. From the CWE perspective, loss of confidentiality is a technical impact that can arise from dozens of different weaknesses, such as insecure file permissions or out-of-bounds read.  CWE-200 and its lower-level descendants are intended to cover the mistakes that occur in behaviors that explicitly manage, store, transfer, or cleanse sensitive information.","Draft","Class","Simple",{"id":94,"name":95,"description":96,"extendedDescription":97,"status":98,"abstraction":99,"structure":92},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar",[],{"title":102,"metaDescription":103,"keywords":104,"canonicalUrl":105,"structuredData":106},"What is CVE-2025-4980? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-4980, a medium severity cyber security vulnerability from 2025. A vulnerability has been found in Netgear DGND3700 1.1.00....","CVE-2025-4980, CVE-2025-4980 vulnerability, CVE-2025-4980 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, netgear security, dgnd3700_firmware vulnerability, dgnd3700 vulnerability","\u002Fwhat-is\u002Fcve-2025-4980",{"@context":107,"@type":108,"headline":102,"description":103,"datePublished":10,"dateModified":11,"author":109,"publisher":113,"about":117,"mainEntityOfPage":121,"articleSection":124,"keywords":125},"https:\u002F\u002Fschema.org","TechArticle",{"@type":110,"name":111,"url":112},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":110,"name":111,"url":112,"logo":114},{"@type":115,"url":116},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":118,"name":6,"description":119,"additionalType":120},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":122,"@id":123},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-4980","Cybersecurity","CVE-2025-4980, CVE-2025-4980 vulnerability, CVE-2025-4980 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[127],{"Operator":128,"Negate":26,"Nodes":129},"AND",[130,135],{"Operator":131,"Negate":41,"CPEMatch":132},"OR",[133],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":134,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3CE829A1-EC2E-47B3-8F03-9C834ED3E5B5",{"Operator":131,"Negate":41,"CPEMatch":136},[137],{"Vulnerable":41,"Criteria":55,"MatchCriteriaID":138,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7A8F0B8E-D3F2-43C9-8B12-43DE4226E826",[],[141],{"id":142,"eventType":143,"eventTime":144,"details":145,"label":146,"color":147},"98f4b2c4-1984-4577-b2ad-ffedb20db2fa","NEW_NVD","2025-06-09T22:28:48.074976+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":149,"version":34},1792453371740,{"score":151,"band":45,"action":152,"scoredAt":153},44,"Plan remediation","2026-10-16T07:07:21.625098+00:00"]