CVE-2016-5638 Information disclosure in WNDR4500
Remote attackers can access unauthenticated pages to view wireless SSID and network keys in clear text, exposing network credentials.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-5638?
CVE-2016-5638 is a high-severity vulnerability in Netgear Wndr4500 Firmware, published on 24 Jul 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.40_1.0.6877. Genie app adds some capabilities over the Web GUI and can be accessed even when you are away from home. A remote attacker can access genie_ping.htm or genie_ping2.htm or genie_ping3.htm page without authentication. Once accessed, the page will be redirected to the aCongratulations2.htma page, which reveals some sensitive information such as 2.4GHz & 5GHz Wireless Network Name (SSID) and Network Key (Password) in clear text.
Which versions are affected by CVE-2016-5638?
It affects 1 product.
Products include Netgear Wndr4500 Firmware.
How do I fix CVE-2016-5638?
No fix has been published for CVE-2016-5638 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-5638 being exploited?
There is no known exploitation of CVE-2016-5638 in the wild and no public exploit code.
Other vulnerabilities in Netgear Wndr4500 Firmware
Sources
Also known as GHSA-r939-7mv3-6352.