PT-2016-3879
CVE-2015-8288
·
تاريخ النشر
2016-06-20
·
تاريخ التحديث
2016-06-21
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
NETGEAR D3600 versions 1.0.0.49 and earlier
NETGEAR D6000 versions 1.0.0.49 and earlier
Description
The issue allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a hardcoded private key from another installation. This is possible because the same private key is used across different customers' installations.
Recommendations
For NETGEAR D3600 version 1.0.0.49 and earlier, consider updating the firmware to a version that does not use a hardcoded private key.
For NETGEAR D6000 version 1.0.0.49 and earlier, consider updating the firmware to a version that does not use a hardcoded private key.
As a temporary workaround, restrict access to the device to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾