CVE-2017-5521
NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
CVSS
—
Sin CVSS
EPSS
89.4%
p100
KEV
SÍ
8 sept 2022
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Producto
NETGEAR / Multiple Devices
Vulnerabilidad
NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
Añadido a KEV
8 sept 2022
Remediar antes de
29 sept 2022
Uso conocido en ransomware
No
Descripción resumida
Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server.
Acción requerida
Apply updates per vendor instructions. If the affected device has since entered end-of-life, it should be disconnected if still in use.
Notas
https://kb.netgear.com/30632/Web-GUI-Password-Recovery-and-Exposure-Security-Vulnerability; https://nvd.nist.gov/vuln/detail/CVE-2017-5521