CVE-2024-6646: Information Disclosure vulnerability in Netgear WN604. This security flaw allows for remote unauthorized access to sensitive information via the /downloadFile.php endpoint in the web interface. A successful exploit can lead to the disclosure of confidential data.

Although rated 'problematic' and having a CVSS score of 5.3, the SOCRadar Vulnerability Risk Score (SVRS) for CVE-2024-6646 is 56, indicating a moderate level of risk. The vulnerability involves CWE-200, and the fact that it has been disclosed publicly and is tagged 'In The Wild' increases the likelihood of exploitation. The lack of response from the vendor further exacerbates the risk, making mitigation a higher priority.