EUVD-2006-1007

Malware in sbrugna...

Default credentials

NETGEAR WGT624 Wireless DSL router has a default account of superusername "Gearguy" and superpasswd "Geardog", which allows remote attackers to modify the configuration. NOTE: followup posts have suggested that this might not occur with all WGT624 routers...

Design/Logic Flaw

The backup configuration option in NETGEAR WGT624 Wireless Firewall Router stores sensitive information in cleartext, which allows remote attackers to obtain passwords and gain privileges...

CVE-2006-1002

NETGEAR WGT624 Wireless DSL router has a default account of superusername "Gearguy" and superpasswd "Geardog", which allows remote attackers to modify the configuration. NOTE: followup posts have suggested that this might not occur with all WGT624 routers...

CVE-2006-1003

The backup configuration option in NETGEAR WGT624 Wireless Firewall Router stores sensitive information in cleartext, which allows remote attackers to obtain passwords and gain privileges...

CVE-2006-1002

NETGEAR WGT624 Wireless DSL router has a default account of superusername "Gearguy" and superpasswd "Geardog", which allows remote attackers to modify the configuration. NOTE: followup posts have suggested that this might not occur with all WGT624 routers...

CVE-2006-1003

The CVE-2006-1003 entry concerns the NETGEAR WGT624 Wireless Firewall Router. The connected documents confirm that the backup configuration option stores sensitive information in cleartext, allowing remote attackers to obtain passwords and potentially gain privileges. The material does not provid...

CVE-2006-1002

The CVE-2006-1002 entry concerns NETGEAR WGT624 Wireless DSL router with a default account: super_username = Gearguy and super_passwd = Geardog. This hardcoded credential enables remote attackers to modify the device configuration, indicating a remote-authentication vulnerability. The initial des...

CVE-2006-1003

The backup configuration option in NETGEAR WGT624 Wireless Firewall Router stores sensitive information in cleartext, which allows remote attackers to obtain passwords and gain privileges...