PT-2002-3067 · NetGear · Netgear Fm114P

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2355

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netgear FM114P firmware version 1.3

Description The issue concerns the storage of sensitive information in cleartext when the wireless firewall is configured to backup configuration information. This could allow local users to obtain sensitive information, including DDNS (DynDNS) user name and password, MAC address filtering table, and possibly other information.

Recommendations For Netgear FM114P firmware version 1.3, consider disabling the configuration backup feature until a secure method of storing sensitive information is implemented. Restrict access to the configuration information to minimize the risk of exploitation. Avoid using the backup feature for sensitive information until the issue is resolved.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2002-2355

Produtos afetados

Netgear Fm114P

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-2355 · Nota de Segurança
• http://securityfocus.com/archive/1/294740 · Nota
• http://securityfocus.com/bid/5943 · Nota
• http://iss.net/security_center/static/10341.php · Nota