PT-2018-4931 · NetGear · Netgear Wndr4500

Published 2018-07-24 · Updated 2019-10-09 · CVE-2016-5638

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netgear WNDR4500 firmware version V1.0.1.40 1.0.6877

Description A remote attacker can access certain web pages associated with the genie app without authentication. Specifically, accessing genie ping.htm, genie ping2.htm, or genie ping3.htm pages redirects to the aCongratulations2.htma page, which reveals sensitive information, including the 2.4GHz and 5GHz Wireless Network Name (SSID) and Network Key (Password) in clear text.

Recommendations For Netgear WNDR4500 firmware version V1.0.1.40 1.0.6877, consider restricting access to the genie app web pages, specifically genie ping.htm, genie ping2.htm, and genie ping3.htm, until a patch is available. As a temporary workaround, avoid using the genie app when away from home to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Information Disclosure

Weakness Enumeration

CWE-319

CWE-200

Related Identifiers

CVE-2016-5638

Affected Products

Netgear Wndr4500

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-5638 · Security Note
• https://osv.dev/vulnerability/CVE-2016-5638 · Vendor Advisory
• https://packetstormsecurity.com/files/140342/Netgear-DGN2200-DGND3700-WNDR4500-Information-Disclosure.html · Note