Netgear DGN2200/DGND3700 BSW_cxttongr.htm Password information disclosure

Summaryinfo

A vulnerability classified as problematic was found in Netgear DGN2200 and DGND3700. Affected by this vulnerability is an unknown functionality of the file BSW_cxttongr.htm. Executing a manipulation can lead to information disclosure (Password). This vulnerability is tracked as CVE-2016-5649. The attack can be launched remotely. No exploit exists. The application of restrictive firewalling is recommended.

Detailsinfo

A vulnerability classified as problematic was found in Netgear DGN2200 and DGND3700 (Wireless LAN Software) (version unknown). This vulnerability affects an unknown function of the file BSW_cxttongr.htm. The manipulation with an unknown input leads to a information disclosure vulnerability (Password). The CWE definition for the vulnerability is CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. As an impact it is known to affect confidentiality. CVE summarizes:

A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a remote attacker to access this page without any authentication. When processed, it exposes the admin password in clear text before it gets redirected to absw_vfysucc.cgia. An attacker can use this password to gain administrator access to the targeted router's web interface.

The bug was discovered 01/03/2017. The weakness was disclosed 07/24/2018 as File 140342/Net (Packetstorm). The advisory is available at packetstormsecurity.com. This vulnerability was named CVE-2016-5649 since 06/16/2016. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1592 by the MITRE ATT&CK project.

The vulnerability was handled as a non-public zero-day exploit for at least 567 days. During that time the estimated underground price was around $5k-$25k. By approaching the search of inurl:BSW_cxttongr.htm it is possible to find vulnerable targets with Google Hacking. The commercial vulnerability scanner Qualys is able to test this issue with plugin 11749 (Netgear DGN2200, DGND3700 and WNDR4500 Sensitive Information Disclosure Vulnerability).

Proper firewalling of is able to address this issue.

The entry VDB-122121 is pretty similar. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Wireless LAN Software

Vendor

• Netgear

Name

• DGN2200
• DGND3700

License

• commercial

Website

• Vendor: https://www.netgear.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion