CVE-2014-2969 in GS108PE
Summary
NETGEAR GS108PE Prosafe Plus switches with firmware 1.2.0.5 have a hardcoded password of debugpassword for the ntgruser account, which allows remote attackers to upload firmware or read or modify memory contents, and consequently execute arbitrary code, via a request to (1) produce_burn.cgi, (2) register_debug.cgi, or (3) bootcode_update.cgi.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
04/21/2014
Disclosure
07/07/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 66983 | Netgear GS108PE Default Account produce_burn.cgi credentials management | 255 | Unproven | Workaround | CVE-2014-2969 |