Information disclosure in NETGEAR Prosafe Firmware
CVE-2013-4775
NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, and GS725TS with firmware 5.3.0.17; and GS752TXS and GS728TXS with firmware 6.1.0.12 allows remote attackers to read encrypted administrator credentials and other startup configurations via a direct request to filesystem/startup-config.
Vulnerability class: Information Disclosure
EPSS: 0.150 (96.4th percentile) — read the EPSS interpretation.
Affected products
- Netgear Prosafe_firmware — versions 5.3.0.17, 5.0.4.4, 5.4.0.6
- Netgear Prosafe_gs510tp
- Netgear Prosafe_gs724t — versions v3
- Netgear Prosafe_gs725ts
- Netgear Prosafe_gs728tps
- Netgear Prosafe_gs728ts
- Netgear Prosafe_gs728txs
- Netgear Prosafe_gs748t — versions v4
- Netgear Prosafe_gs752tps
- Netgear Prosafe_gs752txs
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)