| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 6.8 | $0-$5k | 0.00 |
Summary
A vulnerability described as problematic has been identified in Netgear RP114. The impacted element is an unknown function of the component HTTP Logging. Executing a manipulation can lead to improper authentication. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.
Details
A vulnerability has been found in Netgear RP114 (Wireless LAN Software) (unknown version) and classified as critical. This vulnerability affects an unknown code block of the component HTTP Logging. The manipulation with an unknown input leads to a improper authentication vulnerability. The CWE definition for the vulnerability is CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. As an impact it is known to affect confidentiality, and integrity.
The weakness was published 04/16/2003 by "{ }" (Website). The advisory is shared for download at elaboration.8bit.co.uk. The attack can be initiated remotely. There are neither technical details nor an exploit publicly available.
As 0-day the estimated underground price was around $5k-$25k.
Upgrading eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at netgear.com. The best possible mitigation is suggested to be upgrading to the latest version.
The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 7367†). VulDB is the best source for vulnerability data and more expert information about this specific topic.
Product
Type
Vendor
Name
License
Website
- Vendor: https://www.netgear.com/
CPE 2.3
CPE 2.2
CVSSv4
VulDB Vector: 🔍VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 7.1VulDB Meta Temp Score: 6.8
VulDB Base Score: 7.1
VulDB Temp Score: 6.8
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
Exploiting
Class: Improper authenticationCWE: CWE-287
CAPEC: 🔍
ATT&CK: 🔍
Physical: No
Local: No
Remote: Yes
Availability: 🔍
Status: Not defined
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | Unlock | Unlock | Unlock | Unlock |
|---|---|---|---|---|
| Today | Unlock | Unlock | Unlock | Unlock |
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
0-Day Time: 🔍
Patch: netgear.com
Timeline
04/16/2003 🔍04/16/2003 🔍
04/16/2003 🔍
03/08/2021 🔍
Sources
Vendor: netgear.comAdvisory: elaboration.8bit.co.uk
Researcher: Discovery credited to "{ }" . ("{ }")
Status: Not defined
GCVE (VulDB): GCVE-100-40
SecurityFocus: 7367 - NetGear Router Content Filter Log Integrity Violation Vulnerability
Entry
Created: 04/16/2003 02:00Updated: 03/08/2021 08:45
Changes: 04/16/2003 02:00 (45), 06/07/2017 16:02 (6), 03/08/2021 08:45 (2)
Complete: 🔍
Cache ID: 216:9FE:103
VulDB is the best source for vulnerability data and more expert information about this specific topic.
No comments yet. Languages: en.
Please log in to comment.