CVE-2017-5521
NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
CVSS
—
Sem CVSS
EPSS
89.4%
p100
KEV
SIM
8 de set. de 2022
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Produto
NETGEAR / Multiple Devices
Vulnerabilidade
NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
Adicionado ao KEV
8 de set. de 2022
Corrigir até
29 de set. de 2022
Uso conhecido em ransomware
Não
Descrição resumida
Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server.
Ação necessária
Apply updates per vendor instructions. If the affected device has since entered end-of-life, it should be disconnected if still in use.
Notas
https://kb.netgear.com/30632/Web-GUI-Password-Recovery-and-Exposure-Security-Vulnerability; https://nvd.nist.gov/vuln/detail/CVE-2017-5521