CVE-2017-5521
NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
CVSS
—
No CVSS
EPSS
89.2%
p100
KEV
YES
Sep 8, 2022
Exploit Today
80
0-100
Published: — · Last modified: —
Product
NETGEAR / Multiple Devices
Vulnerability
NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
Added to KEV
Sep 8, 2022
Remediate by
Sep 29, 2022
Known ransomware use
No
Summary description
Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server.
Required action
Apply updates per vendor instructions. If the affected device has since entered end-of-life, it should be disconnected if still in use.
Notes
https://kb.netgear.com/30632/Web-GUI-Password-Recovery-and-Exposure-Security-Vulnerability; https://nvd.nist.gov/vuln/detail/CVE-2017-5521