Netgear GS810EMX prior 1.0.0.5 information disclosure

Summaryinfo

A vulnerability classified as problematic was found in Netgear GS810EMX. This affects an unknown function. The manipulation results in information disclosure. This vulnerability is known as CVE-2018-21143. Access to the local network is required for this attack. No exploit is available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in Netgear GS810EMX (Router Operating System). It has been classified as problematic. Affected is an unknown function. The manipulation with an unknown input leads to a information disclosure vulnerability. CWE is classifying the issue as CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. This is going to have an impact on confidentiality. CVE summarizes:

NETGEAR GS810EMX devices before 1.0.0.5 are affected by disclosure of sensitive information.

The weakness was published 04/21/2020 (Website). The advisory is shared for download at kb.netgear.com. This vulnerability is traded as CVE-2018-21143 since 04/20/2020. The attack needs to approached within the local network. The exploitation doesn't require any form of authentication. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1592.

Upgrading to version 1.0.0.5 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• Netgear

Name

• GS810EMX

License

• commercial

Website

• Vendor: https://www.netgear.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion