EUVD-2026-44329
GHSA-xc2c-56pv-q355
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber
AV:A because attacker must share the local network segment; PR:N because authentication is bypassed; full CIA impact from unrestricted command execution on the router.
Primary rating from Vendor (NETGEAR).
CVSS VectorVendor: NETGEAR
Lifecycle Timeline
1DescriptionCVE.org
A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device.
This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has not been confirmed on physical production devices.
AnalysisAI
Unauthorized command execution on NETGEAR DGND3700v1 routers (firmware ≤ V1.0.0.17) is achievable by any unauthenticated attacker present on the same local WiFi or LAN segment, exploiting improper input validation that effectively bypasses authentication controls. The CVSS 4.0 vector (AV:A/PR:N/VC:H/VI:H/VA:H) reflects full confidentiality, integrity, and availability impact on the vulnerable device. No public exploit code or confirmed active exploitation exists; NETGEAR identified this issue and published a July 2026 security advisory, though testing was conducted only against a simulated firmware environment and has not been verified on physical production hardware.
Technical ContextAI
The NETGEAR DGND3700v1 is a legacy DSL modem-router. CWE-20 (Improper Input Validation) indicates the root cause is a failure to properly validate or authenticate commands received over the adjacent network interface - consistent with the 'Authentication Bypass' tag, where the device accepts and executes commands without enforcing credential checks. The affected CPE is cpe:2.3:a:netgear:dgnd3700v1:*:*:*:*:*:*:*:* covering all versions at or below V1.0.0.17. Notably, the CPE type is 'a' (application) rather than the expected 'h' (hardware) or 'o' (OS/firmware), which may reflect a NVD/EUVD cataloguing inconsistency rather than a software-only deployment. The attack surface is the local network management plane of the device, reachable from any host on the same broadcast domain or WiFi network.
RemediationAI
Consult the NETGEAR July 2026 Security Advisory at https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory for the official patched firmware version; no exact fixed firmware version number is independently confirmed from the available data, so the advisory should be treated as the authoritative source. Upgrade DGND3700v1 firmware to the version specified in that advisory. As an interim compensating control, restrict WiFi access to trusted devices only using MAC address filtering (trade-off: MAC spoofing can bypass this) and disable any remote or guest network access to reduce the adjacent attack surface. Placing the router's management interface on an isolated VLAN accessible only to administrators would further limit exposure. Given the DGND3700v1 is a legacy device, organizations should also evaluate whether replacement with a supported model is more appropriate than continued firmware maintenance.
Same weakness CWE-20 – Improper Input Validation
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today