CVE-2014-2969 in GS108PE

Resumen (Inglés)

NETGEAR GS108PE Prosafe Plus switches with firmware 1.2.0.5 have a hardcoded password of debugpassword for the ntgruser account, which allows remote attackers to upload firmware or read or modify memory contents, and consequently execute arbitrary code, via a request to (1) produce_burn.cgi, (2) register_debug.cgi, or (3) bootcode_update.cgi.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2014-04-21

Divulgación

2014-07-07

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
66983	Netgear GS108PE Default Account produce_burn.cgi escalada de privilegios	255	No probado	Solución alternativa	CVE-2014-2969

Fuentes

• MITRE
• NVD
• CVE Details