Vulnerability in Netgear Gs108pe

CVE-2014-2969

NETGEAR GS108PE Prosafe Plus switches with firmware 1.2.0.5 have a hardcoded password of debugpassword for the ntgruser account, which allows remote attackers to upload firmware or read or modify memory contents, and consequently execute a…

EPSS: 0.015 (71.6th percentile) — read the EPSS interpretation.

Affected products

Netgear Gs108pe
Netgear Gs108pe_firmware — versions 1.2.0.5
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)