Hardcoded credentials

NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from...

CVE-2015-8288

NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from...

CVE-2015-8288

Netgear D6000 and D3600 routers running firmware 1.0.0.49 (and earlier) contain a hard-coded RSA private key and a hard-coded X.509 certificate/key pair, enabling remote attackers to bypass cryptographic protections, gain administrator access, perform man‑in‑the‑middle attacks, or decrypt passive...

CVE-2015-8288: Undefined Security Weakness

NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from...

CVE-2015-8289: Exposure of Sensitive Information to an Unauthorized Actor

The password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier allows remote attackers to discover the cleartext administrator password by reading the cgi-bin/passrec.asp HTML source code...

Netgear D6000 and D3600 Hardcoded RSA Key Vulnerability

The Netgear D6000 and D3600 are wireless router products from American Netgear. The Netgear D6000 and D3600 device firmware uses hard-coded RSA keys, which allows remote attackers to exploit the vulnerability to conduct a man-in-the-middle attack with the keys, gain administrator access, and...

Netgear D6000 and D3600 contain hard-coded cryptographic keys and are vulnerable to authentication bypass

Overview The Netgear D6000 and D3600 routers are vulnerable to authentication bypass and contain hard-coded cryptographic keys embedded in their firmware. Description CWE-321: Use of Hard-coded Cryptographic Key -- CVE-2015-8288The firmware for these devices contains a hard-coded RSA private key,...

CVE-2012-4330

The CVE affects Samsung D6000 TV (and possibly other products) where a remote attacker can crash the device by sending a long string in certain fields, demonstrated via the MAC address field. The issue is described as possibly a buffer overflow that leads to denial of service. Available documents...

CVE-2012-4329

The CVE-2012-4329 entry concerns Samsung devices (notably the D6000 TV) and possibly others. It describes a denial-of-service condition in which remote attackers can trigger continuous restarts by sending a crafted controller name. The provided documents do not specify root cause details, affecte...

CVE-2012-4330: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service crash via a long string in certain fields, as demonstrated by the MAC address field, possibly a buffer overflow...

CVE-2012-4329: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service continuous restart via a crafted controller name...