NETGEAR - passwordrecovered.cgi Disclosure (CVE-2017-5521)

Detects CVE-2017-5521 by extracting unauth.cgi?id= token and requesting passwordrecovered.cgi to recover admin credentials without auth. !/usr/bin/env python3 -- coding: utf-8 -- """NETGEAR passwordrecovered.cgi password disclosure CVE-2017-5521.""" import re from kittysploit import from...

CVE-2017-5521: Undefined Security Weakness

An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. They are prone to password disclosure via simple crafted requests to the web management server. The bug is exploitable remotely if the remote...