Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2g83-cg5q-4fmj

Опубликовано: 03 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.7

Описание

NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.

The specific flaw exists within the handling of device configuration. The issue results from the storage of configuration secrets in plaintext. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19841.

NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.

The specific flaw exists within the handling of device configuration. The issue results from the storage of configuration secrets in plaintext. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19841.

EPSS

Процентиль: 4%
0.00018
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-312

Связанные уязвимости

CVSS3: 5.7
nvd
почти 2 года назад

NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of device configuration. The issue results from the storage of configuration secrets in plaintext. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19841.

CVSS3: 8.4
fstec
около 3 лет назад

Уязвимость конфигурации микропрограммного обеспечения маршрутизаторов NETGEAR RAX30, позволяющая нарушителю раскрыть защищаемую информацию и скомпрометировать систему

EPSS

Процентиль: 4%
0.00018
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-312