CVE-2015-8288

Name of the Vulnerable Software and Affected Versions NETGEAR D3600 versions 1.0.0.49 and earlier NETGEAR D6000 versions 1.0.0.49 and earlier

Description The issue allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a hardcoded private key from another installation. This is possible because the same private key is used across different customers' installations.

Recommendations For NETGEAR D3600 version 1.0.0.49 and earlier, consider updating the firmware to a version that does not use a hardcoded private key. For NETGEAR D6000 version 1.0.0.49 and earlier, consider updating the firmware to a version that does not use a hardcoded private key. As a temporary workaround, restrict access to the device to minimize the risk of exploitation.