PT-2006-2040 · NetGear · Netgear Wgt624 Wireless Dsl Router

Published 2006-03-06 · Updated 2020-02-06 · CVE-2006-1002

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NETGEAR WGT624 Wireless DSL router (affected versions not specified)

Description The issue concerns a default account in the NETGEAR WGT624 Wireless DSL router, with a username of super username "Gearguy" and a password of super passwd "Geardog". This default account allows remote attackers to modify the router's configuration. It has been suggested that not all WGT624 routers may be affected by this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2006-1002

Affected Products

Netgear Wgt624 Wireless Dsl Router

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-1002 · Security Note
• http://securityfocus.com/archive/1/431026/30/5580/threaded · Note
• http://securityfocus.com/bid/16835 · Note
• http://securityfocus.com/archive/1/426313/100/0/threaded · Note
• https://t.me/cibsecurity/9673 · Telegram Post
• http://securityfocus.com/archive/1/426187/100/0/threaded · Note
• http://securityfocus.com/archive/1/485396/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24926 · Note