PT-2019-6903 · NetGear · Netgear Wndr4700

Jacob Holcomb · Publicado 2019-11-14 · Atualizado 2019-11-18 · CVE-2013-3070

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netgear WNDR4700 version 1.0.0.34

Description An Information Disclosure issue exists in the management web interface, which discloses the Pre-Shared Key (PSK) of the wireless LAN.

Recommendations For Netgear WNDR4700 version 1.0.0.34, consider changing the PSK of the wireless LAN and restricting access to the management web interface until a fix is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-3070

Produtos afetados

Netgear Wndr4700

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2013-3070 · Nota de Segurança
• https://securityfocus.com/bid/59308 · Nota
• https://ise.io/casestudies/exploiting-soho-routers · Nota
• https://ise.io/soho_service_hacks · Nota
• https://ise.io/wp-content/uploads/2017/07/soho_techreport.pdf · Nota
• https://kb.netgear.com/24413/WNDR3700v4-Firmware-Version-1-0-1-52-Except-China-and-Russia-Only · Aviso do Fabricante