Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-06688
HistoryJan 17, 2022 - 12:00 a.m.

NETGEAR XR1000 Trust Management Issue Vulnerability

2022-01-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
netgear
xr1000
trust management
security vulnerability
hard-coded passwords
decompiling
att&ck tactics

EPSS

0.001

Percentile

31.4%

The NETGEAR xr1000 is a router from Netgear, Inc. A hardware device that connects two or more networks and acts as a gateway between networks, the NETGEAR XR1000 device suffers from a security vulnerability that stems from the fact that NETGEAR XR1000 devices prior to 1.0.0.58 are subject to hard-coded passwords, which can be exploited by an attacker to gain access to a user’s plaintext password by decompiling the hard-coded password.

EPSS

0.001

Percentile

31.4%

Related for CNVD-2022-06688