Information disclosure in NETGEAR Routers and WiFi Systems
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | N/A |
| CWE-ID | CWE-200 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
CBR750 Hardware solutions / Routers & switches, VoIP, GSM, etc LAX20 Hardware solutions / Routers & switches, VoIP, GSM, etc MK62 Hardware solutions / Routers & switches, VoIP, GSM, etc MR60 Hardware solutions / Routers & switches, VoIP, GSM, etc MS60 Hardware solutions / Routers & switches, VoIP, GSM, etc MK72 Hardware solutions / Routers & switches, VoIP, GSM, etc MR70 Hardware solutions / Routers & switches, VoIP, GSM, etc MS70 Hardware solutions / Routers & switches, VoIP, GSM, etc MK82 Hardware solutions / Routers & switches, VoIP, GSM, etc MR80 Hardware solutions / Routers & switches, VoIP, GSM, etc MS80 Hardware solutions / Routers & switches, VoIP, GSM, etc NBR750 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX35v2 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX38v2 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX40v2 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX42 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX43 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX45 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX48 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX50 Hardware solutions / Routers & switches, VoIP, GSM, etc RAX50S Hardware solutions / Routers & switches, VoIP, GSM, etc RAXE450 Hardware solutions / Routers & switches, VoIP, GSM, etc RAXE500 Hardware solutions / Routers & switches, VoIP, GSM, etc RBK752 Hardware solutions / Routers & switches, VoIP, GSM, etc RBR750 Hardware solutions / Routers & switches, VoIP, GSM, etc RBS750 Hardware solutions / Routers & switches, VoIP, GSM, etc RBK842 Hardware solutions / Routers & switches, VoIP, GSM, etc RBR840 Hardware solutions / Routers & switches, VoIP, GSM, etc RBS840 Hardware solutions / Routers & switches, VoIP, GSM, etc RBK852 Hardware solutions / Routers & switches, VoIP, GSM, etc RBR850 Hardware solutions / Routers & switches, VoIP, GSM, etc RBS850 Hardware solutions / Routers & switches, VoIP, GSM, etc RBKE962 Hardware solutions / Routers & switches, VoIP, GSM, etc RBRE960 Hardware solutions / Routers & switches, VoIP, GSM, etc RBSE960 Hardware solutions / Routers & switches, VoIP, GSM, etc XR1000 Hardware solutions / Routers for home users |
| Vendor | NETGEAR |
Security Bulletin
This security bulletin contains one low risk vulnerability.
1) Information disclosure
EUVDB-ID: #VU73742
Risk: Low
CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: N/A
CWE-ID:
CWE-200 - Exposure of sensitive information to an unauthorized actor
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a security misconfiguration issue. A remote attacker can gain unauthorized access to sensitive information on the system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsCBR750: All versions
LAX20: All versions
MK62: All versions
MR60: All versions
MS60: All versions
MK72: All versions
MR70: All versions
MS70: All versions
MK82: All versions
MR80: All versions
MS80: All versions
NBR750: All versions
RAX35v2: All versions
RAX38v2: All versions
RAX40v2: All versions
RAX42: All versions
RAX43: All versions
RAX45: All versions
RAX48: All versions
RAX50: All versions
RAX50S: All versions
RAXE450: All versions
RAXE500: All versions
RBK752: All versions
RBR750: All versions
RBS750: All versions
RBK842: All versions
RBR840: All versions
RBS840: All versions
RBK852: All versions
RBR850: All versions
RBS850: All versions
RBKE962: All versions
RBRE960: All versions
RBSE960: All versions
XR1000: All versions
CPE2.3- cpe:2.3:h:netgear:cbr750:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:lax20:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:mk62:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:mr60:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:ms60:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:mk72:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:mr70:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:ms70:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:mk82:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:mr80:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:ms80:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:nbr750:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax35v2:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax38v2:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax40v2:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax42:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax43:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax45:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax48:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax50:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rax50s:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:raxe450:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:raxe500:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbk752:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbr750:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbs750:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbk842:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbr840:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbs840:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbk852:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbr850:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbs850:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbke962:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbre960:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:rbse960:*:*:*:*:*:*:*:*
- cpe:2.3:h:netgear:xr1000:*:*:*:*:*:*:*:*
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
