PT-2019-6904
CVE-2013-3072
·
تاريخ النشر
2019-11-14
·
تاريخ التحديث
2019-11-20
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
NETGEAR Centria WNDR4700 Firmware version 1.0.0.34
Description
An Authentication Bypass issue exists, allowing any user to access the web administration portal without a password by visiting a specific URL. The affected URL is http:///apply.cgi?/hdd usr setup.htm.
Recommendations
For NETGEAR Centria WNDR4700 Firmware version 1.0.0.34, as a temporary workaround, consider restricting access to the
apply.cgi endpoint until a patch is available. Avoid using the /hdd usr setup.htm page in the affected API endpoint until the issue is resolved.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾