PT-2018-19351

Уязвимость реализации протокола Point-to-Point Protocol PPP встроенного программного обеспечения маршрутизаторов NETGEAR D3600, NETGEAR D6000, NETGEAR D6100, NETGEAR D7800, NETGEAR DM200, NETGEAR R7500v2, NETGEAR R7800, NETGEAR RBK50, NETGEAR RBR50, NETGEAR RBS50 связана с отсутствием мер по...

Netgear D6000 and D3600 Password Disclosure Vulnerability

The Netgear D6000 and D3600 are both wireless router products from Netgear, Inc. A password disclosure vulnerability exists in the password-recovery feature of the Netgear D6000 and D3600 using firmware version 1.0.0.49. A remote attacker can exploit the vulnerability by opening the source code o...

CVE-2015-8288

NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from...

Hardcoded credentials

NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from...

CVE-2015-8288

Netgear D6000 and D3600 routers running firmware 1.0.0.49 (and earlier) contain a hard-coded RSA private key and a hard-coded X.509 certificate/key pair, enabling remote attackers to bypass cryptographic protections, gain administrator access, perform man‑in‑the‑middle attacks, or decrypt passive...

CVE-2015-8288

NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from...

PT-2016-3879

Name of the Vulnerable Software and Affected Versions NETGEAR D3600 versions 1.0.0.49 and earlier NETGEAR D6000 versions 1.0.0.49 and earlier Description The issue allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a hardcoded private key from another...

PT-2016-3880

Name of the Vulnerable Software and Affected Versions NETGEAR D3600 version 1.0.0.49 NETGEAR D6000 versions 1.0.0.49 and earlier Description The issue concerns the password-recovery feature, which allows remote attackers to discover the cleartext administrator password by reading the HTML source...

CVE-2015-8289: Exposure of Sensitive Information to an Unauthorized Actor

The password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier allows remote attackers to discover the cleartext administrator password by reading the cgi-bin/passrec.asp HTML source code...

CVE-2015-8288: Undefined Security Weakness

NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from...

Netgear D6000 and D3600 Hardcoded RSA Key Vulnerability

The Netgear D6000 and D3600 are wireless router products from American Netgear. The Netgear D6000 and D3600 device firmware uses hard-coded RSA keys, which allows remote attackers to exploit the vulnerability to conduct a man-in-the-middle attack with the keys, gain administrator access, and...

Netgear D6000 and D3600 contain hard-coded cryptographic keys and are vulnerable to authentication bypass

Overview The Netgear D6000 and D3600 routers are vulnerable to authentication bypass and contain hard-coded cryptographic keys embedded in their firmware. Description CWE-321: Use of Hard-coded Cryptographic Key -- CVE-2015-8288The firmware for these devices contains a hard-coded RSA private key,...

CVE-2012-4330

The CVE affects Samsung D6000 TV (and possibly other products) where a remote attacker can crash the device by sending a long string in certain fields, demonstrated via the MAC address field. The issue is described as possibly a buffer overflow that leads to denial of service. Available documents...

CVE-2012-4329

The CVE-2012-4329 entry concerns Samsung devices (notably the D6000 TV) and possibly others. It describes a denial-of-service condition in which remote attackers can trigger continuous restarts by sending a crafted controller name. The provided documents do not specify root cause details, affecte...

CVE-2012-4329: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Samsung D6000 TV and possibly other products allow remote attackers to cause a denial of service continuous restart via a crafted controller name...

PT-2012-5332

Name of the Vulnerable Software and Affected Versions Samsung D6000 TV affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a long string in certain fields. This can be demonstrated using the MAC address field...

PT-2012-5331

Name of the Vulnerable Software and Affected Versions Samsung D6000 TV affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a continuous restart, by using a crafted controller name. Recommendations At the moment, there is no...

CVE-2012-4330: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Samsung D6000 TV and possibly other products allows remote attackers to cause a denial of service crash via a long string in certain fields, as demonstrated by the MAC address field, possibly a buffer overflow...