Netgear N600 WNDR3400 up to 1.0.0.38 Config File Upload /genie_restore.htm privileges management

Summaryinfo

A vulnerability was found in Netgear N600 WNDR3400 up to 1.0.0.38. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the file /genie_restore.htm of the component Config File Upload Handler. Performing a manipulation results in privileges management. Moreover, an exploit is present. It is suggested to use restrictive firewalling.

Detailsinfo

A vulnerability classified as critical has been found in Netgear N600 WNDR3400 up to 1.0.0.38. This affects an unknown function of the file /genie_restore.htm of the component Config File Upload Handler. The manipulation with an unknown input leads to a privileges management vulnerability. CWE is classifying the issue as CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. This is going to have an impact on confidentiality.

The weakness was disclosed 04/15/2014 by Santhosh Kumar (security_b0x) as File 126167 as not defined advisory (Packetstorm). It is possible to read the advisory at packetstormsecurity.com. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details and a exploit are known. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

It is declared as proof-of-concept. By approaching the search of inurl:genie_restore.htm it is possible to find vulnerable targets with Google Hacking. The advisory illustrates:

like the same one above the "http://server/genie_restore.htm" the config file can be uploaded which leading to reseting the control to attackers username and password. *.cfg file.

It is possible to mitigate the weakness by firewalling .

The vulnerability is also documented in the databases at X-Force (92993) and OSVDB (105947†). The entry VDB-13166 is pretty similar. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Netgear

Name

• N600 WNDR3400

Version

• 1.0.0.0
• 1.0.0.1
• 1.0.0.2
• 1.0.0.3
• 1.0.0.4
• 1.0.0.5
• 1.0.0.6
• 1.0.0.7
• 1.0.0.8
• 1.0.0.9
• 1.0.0.10
• 1.0.0.11
• 1.0.0.12
• 1.0.0.13
• 1.0.0.14
• 1.0.0.15
• 1.0.0.16
• 1.0.0.17
• 1.0.0.18
• 1.0.0.19
• 1.0.0.20
• 1.0.0.21
• 1.0.0.22
• 1.0.0.23
• 1.0.0.24
• 1.0.0.25
• 1.0.0.26
• 1.0.0.27
• 1.0.0.28
• 1.0.0.29
• 1.0.0.30
• 1.0.0.31
• 1.0.0.32
• 1.0.0.33
• 1.0.0.34
• 1.0.0.35
• 1.0.0.36
• 1.0.0.37
• 1.0.0.38

License

• commercial

Website

• Vendor: https://www.netgear.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion