CVE-2011-1673

BackupConfig.php on the NetGear ProSafe WNAP210 allows remote attackers to obtain the administrator password by reading the configuration file...

CVE-2011-1673

The CVE-2011-1673 entry concerns NetGear ProSafe WNAP210 where the BackupConfig.php component exposes the administrator password by allowing remote reads of the configuration file. This is a remote, unauthenticated exposure affecting the device’s config handling. The connected sources confirm the...

CVE-2011-1673

BackupConfig.php on the NetGear ProSafe WNAP210 allows remote attackers to obtain the administrator password by reading the configuration file...

NETGEAR WNAP210信息泄露及安全绕过漏洞

BUGTRAQ ID: 47175 NETGEAR WNAP210是一款802.11N无线以太网接入点。 NETGEAR WNAP210在实现上存在信息泄露和安全绕过漏洞，远程攻击者可利用此漏洞绕过某些安全限制并获取受影响应用程序的管理员访问权限。 1）对BackupConfig.php脚本的访问没有正确限制，可被利用下载配置文件备份和泄露管理员密码； 2）对recreate.php脚本的访问没有正确限制，可被利用绕过身份验证机制和访问设备的配置网页。 Netgear WNAP210 2.0.12 厂商补丁： Netgear -------...