Direct naar de inhoud
Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
CVE's Videos

← Terug naar CVE-database

CVE-2015-8289

HIGH · 7.5 CVSS Gepubliceerd: CWE-200

Beschrijving

The password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier allows remote attackers to discover the cleartext administrator password by reading the cgi-bin/passrec.asp HTML source code.

Vendors

Netgear

Affected products

D3600 Firmware D3600 D6000 Firmware D6000

References