Lucene search

[email protected]NVD:CVE-2013-4775

HistoryDec 19, 2013 - 4:24 a.m.

CVE-2013-4775

2013-12-1904:24:48

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.616

Percentile

97.8%

JSON

NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, and GS725TS with firmware 5.3.0.17; and GS752TXS and GS728TXS with firmware 6.1.0.12 allows remote attackers to read encrypted administrator credentials and other startup configurations via a direct request to filesystem/startup-config.

Affected configurations

Nvd

Node

netgearprosafe_firmwareMatch5.3.0.17

AND

netgearprosafe_gs725tsMatch-

netgearprosafe_gs728tpsMatch-

netgearprosafe_gs728tsMatch-

netgearprosafe_gs752tpsMatch-

Node

netgearprosafe_firmwareRange≤5.4.1.13

netgearprosafe_firmwareMatch5.0.4.4

netgearprosafe_firmwareMatch5.3.0.17

netgearprosafe_firmwareMatch5.4.0.6

netgearprosafe_firmwareMatch5.4.1.10

AND

netgearprosafe_gs724tMatchv3

netgearprosafe_s716tMatchv2

Node

netgearprosafe_firmwareMatch6.1.0.12

AND

netgearprosafe_gs728txsMatch-

netgearprosafe_gs752txsMatch-

Node

netgearprosafe_firmwareRange≤5.4.1.14

netgearprosafe_firmwareMatch5.0.4.4

netgearprosafe_firmwareMatch5.3.0.17

netgearprosafe_firmwareMatch5.4.0.6

netgearprosafe_firmwareMatch5.4.1.10

netgearprosafe_firmwareMatch5.4.1.13

AND

netgearprosafe_gs748tMatchv4

Node

netgearprosafe_firmwareMatch5.4.0.6

AND

netgearprosafe_gs510tpMatch-

VendorProductVersionCPE
netgearprosafe_firmware5.3.0.17cpe:2.3:o:netgear:prosafe_firmware:5.3.0.17:*:*:*:*:*:*:*
netgearprosafe_gs725ts-cpe:2.3:h:netgear:prosafe_gs725ts:-:*:*:*:*:*:*:*
netgearprosafe_gs728tps-cpe:2.3:h:netgear:prosafe_gs728tps:-:*:*:*:*:*:*:*
netgearprosafe_gs728ts-cpe:2.3:h:netgear:prosafe_gs728ts:-:*:*:*:*:*:*:*
netgearprosafe_gs752tps-cpe:2.3:h:netgear:prosafe_gs752tps:-:*:*:*:*:*:*:*
netgearprosafe_firmware*cpe:2.3:o:netgear:prosafe_firmware:*:*:*:*:*:*:*:*
netgearprosafe_firmware5.0.4.4cpe:2.3:o:netgear:prosafe_firmware:5.0.4.4:*:*:*:*:*:*:*
netgearprosafe_firmware5.4.0.6cpe:2.3:o:netgear:prosafe_firmware:5.4.0.6:*:*:*:*:*:*:*
netgearprosafe_firmware5.4.1.10cpe:2.3:o:netgear:prosafe_firmware:5.4.1.10:*:*:*:*:*:*:*
netgearprosafe_gs724tv3cpe:2.3:h:netgear:prosafe_gs724t:v3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netgear	prosafe_firmware	5.3.0.17	cpe:2.3:o:netgear:prosafe_firmware:5.3.0.17:::::::*
netgear	prosafe_gs725ts	-	cpe:2.3:h:netgear:prosafe_gs725ts:-:::::::*
netgear	prosafe_gs728tps	-	cpe:2.3:h:netgear:prosafe_gs728tps:-:::::::*
netgear	prosafe_gs728ts	-	cpe:2.3:h:netgear:prosafe_gs728ts:-:::::::*
netgear	prosafe_gs752tps	-	cpe:2.3:h:netgear:prosafe_gs752tps:-:::::::*
netgear	prosafe_firmware	*	cpe:2.3:o:netgear:prosafe_firmware::::::::
netgear	prosafe_firmware	5.0.4.4	cpe:2.3:o:netgear:prosafe_firmware:5.0.4.4:::::::*
netgear	prosafe_firmware	5.4.0.6	cpe:2.3:o:netgear:prosafe_firmware:5.4.0.6:::::::*
netgear	prosafe_firmware	5.4.1.10	cpe:2.3:o:netgear:prosafe_firmware:5.4.1.10:::::::*
netgear	prosafe_gs724t	v3	cpe:2.3:h:netgear:prosafe_gs724t:v3:::::::*