CVE-2013-4775 Information disclosure in n/a
Remote attackers can read encrypted administrator credentials and startup configurations from NETGEAR ProSafe switches via a direct request.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-4775?
CVE-2013-4775 is a high-severity vulnerability in n/a, published on 19 Dec 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, and GS725TS with firmware 5.3.0.17; and GS752TXS and GS728TXS with firmware 6.1.0.12 allows remote attackers to read encrypted administrator credentials and other startup configurations via a direct request to filesystem/startup-config.
Weakness: CWE-200
Which versions are affected by CVE-2013-4775?
It affects 11 products.
Products include Netgear Prosafe Firmware, Netgear Prosafe Gs510tp, Netgear Prosafe Gs724t, Netgear Prosafe Gs725ts, Netgear Prosafe Gs728tps, Netgear Prosafe Gs728ts and 5 more.
How do I fix CVE-2013-4775?
No fix has been published for CVE-2013-4775 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-4775 being exploited?
There is no known exploitation of CVE-2013-4775 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-gw22-c69g-q8gm.