Cybersecurity Alerts

NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability

Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server.

Required Action

Apply updates per vendor instructions. If the affected device has since entered end-of-life, it should be disconnected if still in use.

Weakness Classification

CWE-200

References

• https://kb.netgear.com/30632/Web-GUI-Password-Recovery-and-Exposure-Security-Vulnerability
• https://nvd.nist.gov/vuln/detail/CVE-2017-5521