CVE-2017-5521

🗓️ 17 Jan 2017 09:22:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 745 Views🌐 WEB

NETGEAR routers prone to password disclosure via crafted requests, exploitable remotely

Reporter	Title	Published	Views	Family All 27
0day.today	Netgear Routers - Password Disclosure Vulnerabilities	30 Jan 201700:00	–	zdt
ATTACKERKB	CVE-2017-5521	17 Jan 201700:00	–	attackerkb
Circl	CVE-2017-5521	30 Jan 201700:00	–	circl
CISA KEV Catalog	NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability	8 Sep 202200:00	–	cisa_kev
CNVD	Multiple NETGEAR routers are vulnerable to administrator password information leaks	3 Feb 201700:00	–	cnvd
Check Point Advisories	NETGEAR Routers Authentication Bypass (CVE-2017-5521)	7 Feb 201700:00	–	checkpoint_advisories
Check Point Advisories	NETGEAR DGN2200 Remote Code Execution (CVE-2017-5521; CVE-2017-6077)	24 May 201800:00	–	checkpoint_advisories
Cvelist	CVE-2017-5521	17 Jan 201709:22	–	cvelist
Exploit DB	Netgear Routers - Password Disclosure	30 Jan 201700:00	–	exploitdb
exploitpack	NETGEAR Routers - Password Disclosure	30 Jan 201700:00	–	exploitpack

NVD

Node

netgear r6200_firmwareMatch1.0.1.56_1.0.43

AND

netgear r6200Match-

Node

netgear r6300_firmwareMatch1.0.2.78_1.0.58

AND

netgear r6300Match-

Node

netgear vegn2610_firmwareMatch1.0.0.36

AND

netgear vegn2610Match-

Node

netgear ac1450_firmwareMatch1.0.0.34_10.0.16

AND

netgear ac1450Match-

Node

netgear wnr1000v3_firmwareMatch1.0.2.68_60.0.93

AND

netgear wnr1000v3Match-

Node

netgear wndr3700v3_firmwareMatch1.0.0.40_1.0.32

AND

netgear wndr3700v3Match-

Node

netgear wndr4000_firmwareMatch1.0.2.4_9.1.86

AND

netgear wndr4000Match-

Node

netgear wndr4500_firmwareMatch1.0.1.44_1.0.73

AND

netgear wndr4500Match-

Node

netgear d6400_firmwareMatch1.0.0.44

AND

netgear d6400Match-

Node

netgear d6220_firmwareMatch1.0.0.12

AND

netgear d6220Match-

Node

netgear d6300_firmwareMatch1.0.0.96

AND

netgear d6300Match-

Node

netgear d6300b_firmwareMatch1.0.0.40

AND

netgear d6300bMatch-

Node

netgear dgn2200bv4_firmwareMatch1.0.0.68

AND

netgear dgn2200bv4Match-

Source	Link
exploit-db	www.exploit-db.com/exploits/41205/
kb	www.kb.netgear.com/30632/Web-GUI-Password-Recovery-and-Exposure-Security-Vulnerability
securityfocus	www.securityfocus.com/bid/95457
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
id	query param	/passwordrecovered.cgi	Password disclosure via crafted requests to the web management server using passwordrecovered.cgi with an id token.

21 Apr 2026 18:00Current

8.2High risk

Vulners AI Score8.2

CVSS 24.3

CVSS 3.18.1

EPSS0.93804

SSVC

netgear routers vulnerability password disclosure remote exploitation security issue cve-2017-5521