Netgear WNR614 flaws allow device takeover, no fix available

Researchers at RedFox Security disclosed six vulnerabilities in the Netgear WNR614 N300 router (CVE-2024-36787, CVE-2024-36788, CVE-2024-36789, CVE-2024-36790, CVE-2024-36792, CVE-2024-36795) that allow authentication bypass, exposure of credentials (including plaintext storage and WPS PIN leakage), weak password acceptance, insecure cookie handling, and insecure firmware permissions; the device is end-of-life and Netgear is not expected to provide fixes, so users are advised to apply mitigations or replace the router.