CVE-2019-13393 Hardcoded credentials in n/a
Attackers can access the administrative console and Wi-Fi network by exploiting a shared default passphrase used for both HTTP Basic Auth and WPA2.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-13393?
CVE-2019-13393 is a high-severity vulnerability in n/a, published on 13 Mar 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Voo branded NETGEAR CG3700b custom firmware V2.02.03 uses the same default 8 character passphrase for the administrative console and the WPA2 pre-shared key. Either an attack against HTTP Basic Authentication or an attack against WPA2 could be used to determine this passphrase.
Weakness: CWE-1188
Which versions are affected by CVE-2019-13393?
It affects 1 product.
Products include Netgear Cg3700b Firmware.
How do I fix CVE-2019-13393?
No fix has been published for CVE-2019-13393 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-13393 being exploited?
There is no known exploitation of CVE-2019-13393 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-7qhr-r3gj-gxg8.