PT-2020-7286 · NetGear · Netgear Wnr614

Published 2020-02-06 · Updated 2020-02-12 · CVE-2012-6341

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: NEtGEAR WGR614 versions v7 through v9

Description: An Information Disclosure issue exists in the my config file, which could allow a malicious user to recover previously used passwords on the device in plaintext, including those for the control panel and WEP/WPA/WPA2.

Recommendations: For NEtGEAR WGR614 versions v7 through v9, consider changing all previously used passwords and restricting access to the device until a fix is available. As a temporary workaround, restrict access to the my config file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2012-6341

Affected Products

Netgear Wnr614

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-6341 · Security Note
• https://t.me/cvenotify/854 · Telegram Post
• https://securityfocus.com/archive/1/525042 · Note
• https://packetstormsecurity.com/files/date/2012-12-14 · Note