PT-2004-3448 · NetGear · Netgear Wg602

Chucky B. Bear + 1 · Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2557

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions NetGear WG602 (aka WG602v1) Wireless Access Point version 1.7.14

Description The issue concerns a hardcoded account with the username superman and password 21241036, allowing remote attackers to modify the configuration.

Recommendations For NetGear WG602 (aka WG602v1) Wireless Access Point version 1.7.14, consider changing the hardcoded password for the superman account to prevent unauthorized access. As a temporary workaround, restrict remote access to the device until a more permanent solution is available.

Exploit

Fix

Related Identifiers

CVE-2004-2557

Affected Products

Netgear Wg602

References · 10

• 🔥 http://slashdot.org/articles/04/06/08/1319206.shtml?tid=126&tid=172 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2004-06/0036.html · Exploit
• 🔥 http://secunia.com/advisories/11773 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2557 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16312 · Note
• http://kbserver.netgear.com/kb_web_files/n101383.asp · Note
• http://securityfocus.com/bid/10459 · Note
• http://securityfocus.com/archive/1/365230 · Note
• http://ciac.org/ciac/bulletins/o-159.shtml · Note
• http://osvdb.org/6743 · Note