PT-2017-15323 · NetGear · Wn-G300R3

Taizoh Tsukamoto · Publicado 2017-08-02 · Atualizado 2017-08-07 · CVE-2017-2283

Positive Technologies (AI Summary)

CVSS v3.1

8.0

Alta

Vetor base

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WN-G300R3 firmware versions 1.0.2 and earlier

Description The issue allows an attacker with device access to execute arbitrary code on the device due to the use of hardcoded credentials.

Recommendations For WN-G300R3 firmware versions 1.0.2 and earlier, update to a version that does not use hardcoded credentials to prevent arbitrary code execution.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2017-2283

Produtos afetados

Wn-G300R3

Referências · 4

• https://jvn.jp/en/jp/JVN51410509/index.html · Nota
• http://iodata.jp/support/information/2017/wn-g300r3_2 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-2283 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-2283 · Nota de Segurança