7.8

CVE-2013-4775

Exploit
NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, and GS725TS with firmware 5.3.0.17; and GS752TXS and GS728TXS with firmware 6.1.0.12 allows remote attackers to read encrypted administrator credentials and other startup configurations via a direct request to filesystem/startup-config.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netgear ≫ Prosafe Firmware Version 5.3.0.17
Netgear ≫ Prosafe Gs725ts Version -
Netgear ≫ Prosafe Gs728tps Version -
Netgear ≫ Prosafe Gs728ts Version -
Netgear ≫ Prosafe Gs752tps Version -
Netgear ≫ Prosafe Firmware Version <= 5.4.1.13
Netgear ≫ Prosafe Firmware Version 5.0.4.4
Netgear ≫ Prosafe Firmware Version 5.3.0.17
Netgear ≫ Prosafe Firmware Version 5.4.0.6
Netgear ≫ Prosafe Firmware Version 5.4.1.10
Netgear ≫ Prosafe Gs724t Version v3
Netgear ≫ Prosafe S716t Version v2
Netgear ≫ Prosafe Firmware Version 6.1.0.12
Netgear ≫ Prosafe Gs728txs Version -
Netgear ≫ Prosafe Gs752txs Version -
Netgear ≫ Prosafe Firmware Version <= 5.4.1.14
Netgear ≫ Prosafe Firmware Version 5.0.4.4
Netgear ≫ Prosafe Firmware Version 5.3.0.17
Netgear ≫ Prosafe Firmware Version 5.4.0.6
Netgear ≫ Prosafe Firmware Version 5.4.1.10
Netgear ≫ Prosafe Firmware Version 5.4.1.13
Netgear ≫ Prosafe Gs748t Version v4
Netgear ≫ Prosafe Firmware Version 5.4.0.6
Netgear ≫ Prosafe Gs510tp Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 14.96% 0.963
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:C/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.encripto.no/forskning/whitepapers/Netgear_prosafe_advisory_aug_2013.pdf
Exploit