PT-2004-3448 · NetGear · Netgear Wg602

Chucky B. Bear + 1 · Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2557

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions NetGear WG602 (aka WG602v1) Wireless Access Point version 1.7.14

Description The issue concerns a hardcoded account with the username superman and password 21241036, allowing remote attackers to modify the configuration.

Recommendations For NetGear WG602 (aka WG602v1) Wireless Access Point version 1.7.14, consider changing the hardcoded password for the superman account to prevent unauthorized access. As a temporary workaround, restrict remote access to the device until a more permanent solution is available.

Exploit

Correção

Identificadores relacionados

CVE-2004-2557

Produtos afetados

Netgear Wg602

Referências · 10

• 🔥 http://slashdot.org/articles/04/06/08/1319206.shtml?tid=126&tid=172 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2004-06/0036.html · Exploit
• 🔥 http://secunia.com/advisories/11773 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16312 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2557 · Nota de Segurança
• http://kbserver.netgear.com/kb_web_files/n101383.asp · Nota
• http://securityfocus.com/bid/10459 · Nota
• http://securityfocus.com/archive/1/365230 · Nota
• http://ciac.org/ciac/bulletins/o-159.shtml · Nota
• http://osvdb.org/6743 · Nota