CVE-2016-5649 Netgear DGN2200 and DGND3700 disclose the administrator password
Remote attackers can access an unauthenticated page to retrieve the administrator password in clear text, leading to full router compromise.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-5649?
CVE-2016-5649 is a critical vulnerability in Netgear DGN2200, published on 24 Jul 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a remote attacker to access this page without any authentication. When processed, it exposes the admin password in clear text before it gets redirected to absw_vfysucc.cgia. An attacker can use this password to gain administrator access to the targeted router's web interface.
Which versions are affected by CVE-2016-5649?
It affects 2 products.
Products include Netgear Dgn2200 Firmware, Netgear Dgnd3700 Firmware.
How do I fix CVE-2016-5649?
No fix has been published for CVE-2016-5649 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-5649 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2016-5649 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Netgear DGN2200
Sources
Also known as GHSA-xgqp-24fp-7v85.