CVE-2013-4776

CVE-2013-4776 affects Netgear ProSafe switches (GS724Tv3/GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 5.4.1.14; GS510TP 5.0.4.4) and causes a Denial of Service via a crafted HTTP request to /filesystem/. The issue can reboot or crash the device, leading to loss of network connectivity. P...

Netgear ProSafe switches: Unauthenticated startup-config disclosure and Denial of Service

BACKGROUND According to the vendor, Netgear ProSafe is a cost-effective line of smart switches for Small and Medium Businesses SMBs. The products cover an essential set of network features and easy-to-use web-based management. Power over Ethernet PoE and Stacking versions are also available. 2...

Netgear ProSafe switches security vulnerabilities

Information leakage, DoS...

NETGEAR ProSafe - Information Disclosure

NETGEAR ProSafe - Information Disclosure !/usr/bin/python Netgear ProSafe - CVE-2013-4775 PoC written by Juan J. Guelfo @ Encripto AS [email protected] Copyright 2013 Encripto AS. All rights reserved. This software is licensed under the FreeBSD license. http://www.encripto.no/tools/license.php...

Netgear ProSafe - Information Disclosure Vulnerability

Exploit for hardware platform in category web applications...

Netgear ProSafe - Denial of Service Vulnerability

Netgear ProSafe switches suffer from denial of service and unauthenticated startup-config disclosure vulnerabilities. import sys, getopt, urllib2 from subprocess import version = "0.1" author = "Juan J. Guelfo, Encripto AS email protected" Prints title and other header info def header: print ""...

NETGEAR ProSafe - Denial of Service

NETGEAR ProSafe - Denial of Service !/usr/bin/python Netgear ProSafe - CVE-2013-4776 PoC written by Juan J. Guelfo @ Encripto AS [email protected] Copyright 2013 Encripto AS. All rights reserved. This software is licensed under the FreeBSD license. http://www.encripto.no/tools/license.php import...

Multiple NetGear ProSafe Switches Information Disclosure Vulnerability

Multiple NetGear ProSafe switches are prone to an information- disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

Netgear ProSafe - Denial of Service

!/usr/bin/python Netgear ProSafe - CVE-2013-4776 PoC written by Juan J. Guelfo @ Encripto AS [email protected] Copyright 2013 Encripto AS. All rights reserved. This software is licensed under the FreeBSD license. http://www.encripto.no/tools/license.php import sys, getopt, urllib2 from subprocess...

Netgear ProSafe - Information Disclosure

!/usr/bin/python Netgear ProSafe - CVE-2013-4775 PoC written by Juan J. Guelfo @ Encripto AS [email protected] Copyright 2013 Encripto AS. All rights reserved. This software is licensed under the FreeBSD license. http://www.encripto.no/tools/license.php import sys, getopt, urllib2 version = "0.1"...

CVE-2012-2439

The default configuration of the NETGEAR ProSafe FVS318N firewall enables web-based administration on the WAN interface, which allows remote attackers to establish an HTTP connection and possibly have unspecified other impact via unknown vectors...

Default configuration

The default configuration of the NETGEAR ProSafe FVS318N firewall enables web-based administration on the WAN interface, which allows remote attackers to establish an HTTP connection and possibly have unspecified other impact via unknown vectors...

CVE-2012-2439

The default configuration of the NETGEAR ProSafe FVS318N firewall enables web-based administration on the WAN interface, which allows remote attackers to establish an HTTP connection and possibly have unspecified other impact via unknown vectors...

CVE-2011-1674

The NetGear ProSafe WNAP210 with firmware 2.0.12 allows remote attackers to bypass authentication and obtain access to the configuration page by visiting recreate.php and then visiting index.php...

CVE-2011-1673

BackupConfig.php on the NetGear ProSafe WNAP210 allows remote attackers to obtain the administrator password by reading the configuration file...

CVE-2011-1674

The NetGear ProSafe WNAP210 with firmware 2.0.12 allows remote attackers to bypass authentication and obtain access to the configuration page by visiting recreate.php and then visiting index.php...

Authentication flaw

The NetGear ProSafe WNAP210 with firmware 2.0.12 allows remote attackers to bypass authentication and obtain access to the configuration page by visiting recreate.php and then visiting index.php...

CVE-2011-1673

BackupConfig.php on the NetGear ProSafe WNAP210 allows remote attackers to obtain the administrator password by reading the configuration file...

CVE-2011-1674

The NetGear ProSafe WNAP210 with firmware 2.0.12 allows remote attackers to bypass authentication and obtain access to the configuration page by visiting recreate.php and then visiting index.php...

CVE-2011-1674

The CVE-2011-1674 entry describes an authentication bypass in the NetGear ProSafe WNAP210 (firmware 2.0.12). Remote attackers can bypass authentication and access the configuration page by visiting recreate.php and then index.php, exposing configuration data. The vulnerability is reflected in CVS...