PT-2011-3285 · NetGear · Netgear Prosafe Wnap210

Trevor Seward · Publicado 2011-04-10 · Atualizado 2017-08-17 · CVE-2011-1674

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetGear ProSafe WNAP210 version 2.0.12

Description The issue allows remote attackers to bypass authentication and obtain access to the configuration page. This can be achieved by visiting the "recreate.php" endpoint and then accessing the "index.php" endpoint.

Recommendations For NetGear ProSafe WNAP210 version 2.0.12, consider restricting access to the "recreate.php" and "index.php" endpoints until a patch is available. As a temporary workaround, limit the exposure of the device to the internet and only allow trusted sources to access the configuration page.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2011-1674

Produtos afetados

Netgear Prosafe Wnap210

Referências · 5

• http://kb.cert.org/vuls/id/644812 · Nota
• http://vupen.com/english/advisories/2011/0884 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66723 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1674 · Nota de Segurança
• http://secunia.com/advisories/44045 · Nota