PT-2004-3447 · NetGear · Netgear Wg602

Chucky B. Bear · Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2556

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions NetGear WG602 (aka WG602v1) Wireless Access Point firmware 1.04.0 NetGear WG602 (aka WG602v1) Wireless Access Point firmware 1.5.67

Description The issue allows remote attackers to modify the configuration due to a hardcoded account. The hardcoded account has a username super and password 5777364.

Recommendations For firmware 1.04.0, change the hardcoded password 5777364 for the super user to prevent unauthorized access. For firmware 1.5.67, change the hardcoded password 5777364 for the super user to prevent unauthorized access.

Exploit

Fix

Related Identifiers

CVE-2004-2556

Affected Products

Netgear Wg602

References · 10

• 🔥 http://slashdot.org/articles/04/06/08/1319206.shtml?tid=126&tid=172 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2004-06/0036.html · Exploit
• 🔥 http://secunia.com/advisories/11773 · Exploit
• 🔥 http://osvdb.org/6743 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2556 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16312 · Note
• http://kbserver.netgear.com/kb_web_files/n101383.asp · Note
• http://securityfocus.com/bid/10459 · Note
• http://securityfocus.com/archive/1/365230 · Note
• http://ciac.org/ciac/bulletins/o-159.shtml · Note