PT-2011-3285 · NetGear · Netgear Prosafe Wnap210

Trevor Seward · Published 2011-04-10 · Updated 2017-08-17 · CVE-2011-1674

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NetGear ProSafe WNAP210 version 2.0.12

Description The issue allows remote attackers to bypass authentication and obtain access to the configuration page. This can be achieved by visiting the "recreate.php" endpoint and then accessing the "index.php" endpoint.

Recommendations For NetGear ProSafe WNAP210 version 2.0.12, consider restricting access to the "recreate.php" and "index.php" endpoints until a patch is available. As a temporary workaround, limit the exposure of the device to the internet and only allow trusted sources to access the configuration page.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2011-1674

Affected Products

Netgear Prosafe Wnap210

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2011-1674 · Security Note
• http://kb.cert.org/vuls/id/644812 · Note
• http://vupen.com/english/advisories/2011/0884 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66723 · Note
• http://secunia.com/advisories/44045 · Note