PT-2006-2040 · NetGear · Netgear Wgt624 Wireless Dsl Router

Publicado 2006-03-06 · Atualizado 2020-02-06 · CVE-2006-1002

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NETGEAR WGT624 Wireless DSL router (affected versions not specified)

Description The issue concerns a default account in the NETGEAR WGT624 Wireless DSL router, with a username of super username "Gearguy" and a password of super passwd "Geardog". This default account allows remote attackers to modify the router's configuration. It has been suggested that not all WGT624 routers may be affected by this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2006-1002

Produtos afetados

Netgear Wgt624 Wireless Dsl Router

Referências · 8

• http://securityfocus.com/archive/1/431026/30/5580/threaded · Nota
• http://securityfocus.com/bid/16835 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1002 · Nota de Segurança
• http://securityfocus.com/archive/1/426313/100/0/threaded · Nota
• https://t.me/cibsecurity/9673 · Publicação no Telegram
• http://securityfocus.com/archive/1/426187/100/0/threaded · Nota
• http://securityfocus.com/archive/1/485396/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24926 · Nota