EUVD-2019-4887

Malware in sbrugna...

EUVD-2019-4888

Malware in sbrugna...

CVE-2019-13394

The Voo branded NETGEAR CG3700b custom firmware V2.02.03 uses HTTP Basic Authentication over cleartext HTTP...

Voo branded NETGEAR CG3700b Authorization Issues Vulnerability

The NETGEAR CG3700b is a cable modem and router from NETGEAR. An authorization issue vulnerability exists in the Voo branded NETGEAR CG3700b that stems from the use of the same default 8-character passphrase for the management console and WPA2 pre-shared key, which can be exploited by an attacker...

CVE-2019-13394

The Voo branded NETGEAR CG3700b custom firmware V2.02.03 uses HTTP Basic Authentication over cleartext HTTP...

CVE-2019-13393

The Voo branded NETGEAR CG3700b custom firmware V2.02.03 uses the same default 8 character passphrase for the administrative console and the WPA2 pre-shared key. Either an attack against HTTP Basic Authentication or an attack against WPA2 could be used to determine this passphrase...

CVE-2019-13395

The Voo branded NETGEAR CG3700b custom firmware V2.02.03 allows CSRF against all /goform/ URIs. An attacker can modify all settings including WEP/WPA/WPA2 keys, restore the router to factory settings, or even upload an entire malicious configuration file...

CVE-2019-13393

The Voo branded NETGEAR CG3700b custom firmware V2.02.03 uses the same default 8 character passphrase for the administrative console and the WPA2 pre-shared key. Either an attack against HTTP Basic Authentication or an attack against WPA2 could be used to determine this passphrase...

CVE-2019-13395

The Voo branded NETGEAR CG3700b custom firmware V2.02.03 allows CSRF against all /goform/ URIs. An attacker can modify all settings including WEP/WPA/WPA2 keys, restore the router to factory settings, or even upload an entire malicious configuration file...

Design/Logic Flaw

The Voo branded NETGEAR CG3700b custom firmware V2.02.03 uses the same default 8 character passphrase for the administrative console and the WPA2 pre-shared key. Either an attack against HTTP Basic Authentication or an attack against WPA2 could be used to determine this passphrase...

Cross site request forgery (csrf)

The Voo branded NETGEAR CG3700b custom firmware V2.02.03 allows CSRF against all /goform/ URIs. An attacker can modify all settings including WEP/WPA/WPA2 keys, restore the router to factory settings, or even upload an entire malicious configuration file...

Authentication flaw

The Voo branded NETGEAR CG3700b custom firmware V2.02.03 uses HTTP Basic Authentication over cleartext HTTP...

CVE-2019-13393: Initialization of a Resource with an Insecure Default

The Voo branded NETGEAR CG3700b custom firmware V2.02.03 uses the same default 8 character passphrase for the administrative console and the WPA2 pre-shared key. Either an attack against HTTP Basic Authentication or an attack against WPA2 could be used to determine this passphrase...

CVE-2019-13395: Cross-Site Request Forgery (CSRF)

The Voo branded NETGEAR CG3700b custom firmware V2.02.03 allows CSRF against all /goform/ URIs. An attacker can modify all settings including WEP/WPA/WPA2 keys, restore the router to factory settings, or even upload an entire malicious configuration file...

PT-2020-9399

Name of the Vulnerable Software and Affected Versions: NETGEAR CG3700b custom firmware version V2.02.03 Description: The issue concerns the use of HTTP Basic Authentication over cleartext HTTP, which poses a security risk. Recommendations: For NETGEAR CG3700b custom firmware version V2.02.03,...

PT-2020-9400

Name of the Vulnerable Software and Affected Versions: NETGEAR CG3700b custom firmware version V2.02.03 Description: The issue allows for Cross-Site Request Forgery CSRF attacks against all "/goform/" URIs. An attacker can modify all settings, including WEP/WPA/WPA2 keys, restore the router to...

CVE-2019-13394: Cleartext Transmission of Sensitive Information

The Voo branded NETGEAR CG3700b custom firmware V2.02.03 uses HTTP Basic Authentication over cleartext HTTP...

PT-2020-9398

Name of the Vulnerable Software and Affected Versions: NETGEAR CG3700b custom firmware version V2.02.03 Description: The issue concerns the use of the same default 8 character passphrase for both the administrative console and the WPA2 pre-shared key. This could be exploited through attacks again...

Voo Branded Netgear CG3700b Firmware CSRF / Authentication

CVEs pending, screenshots and further examples available soon on my site. Cross-Site Request Forgery CSRF on all form POSTs --------------------------------------------------------------------------------- The Voo branded Netgear CG3700b custom firmware newest version, V2.02.03 allows a...