Netgear Nighthawk X10-R900 up to 1.0.4.25 SOAP API /soap/server_sa X-Forwarded-For improper authentication

Summaryinfo

A vulnerability has been found in Netgear Nighthawk X10-R900 up to 1.0.4.25 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /soap/server_sa of the component SOAP API. Performing a manipulation of the argument X-Forwarded-For as part of Request results in improper authentication. This vulnerability is reported as CVE-2019-12510. The attacker must have access to the local network to execute the attack. No exploit exists. The affected component should be upgraded.

Detailsinfo

A vulnerability, which was classified as critical, was found in Netgear Nighthawk X10-R900 up to 1.0.4.25. This affects an unknown part of the file /soap/server_sa of the component SOAP API. The manipulation of the argument X-Forwarded-For as part of a Request leads to a improper authentication vulnerability. CWE is classifying the issue as CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

In NETGEAR Nighthawk X10-R900 prior to 1.0.4.26, an attacker may bypass all authentication checks on the device's "NETGEAR Genie" SOAP API ("/soap/server_sa") by supplying a malicious X-Forwarded-For header of the device's LAN IP address (192.168.1.1) in every request. As a result, an attacker may modify almost all of the device's settings and view various configuration settings.

The weakness was disclosed 02/24/2020. This vulnerability is uniquely identified as CVE-2019-12510 since 06/01/2019. The attack needs to be done within the local network. No form of authentication is needed for exploitation. Technical details of the vulnerability are known, but there is no available exploit.

Upgrading to version 1.0.4.26 eliminates this vulnerability.

The entries VDB-150450, VDB-150449 and VDB-150448 are pretty similar. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Netgear

Name

• Nighthawk X10-R900

Version

• 1.0.4.0
• 1.0.4.1
• 1.0.4.2
• 1.0.4.3
• 1.0.4.4
• 1.0.4.5
• 1.0.4.6
• 1.0.4.7
• 1.0.4.8
• 1.0.4.9
• 1.0.4.10
• 1.0.4.11
• 1.0.4.12
• 1.0.4.13
• 1.0.4.14
• 1.0.4.15
• 1.0.4.16
• 1.0.4.17
• 1.0.4.18
• 1.0.4.19
• 1.0.4.20
• 1.0.4.21
• 1.0.4.22
• 1.0.4.23
• 1.0.4.24
• 1.0.4.25

License

• commercial

Website

• Vendor: https://www.netgear.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion