CVE-2019-17372
Summary
| CVE | CVE-2019-17372 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-10-09 13:15:00 UTC |
| Updated | 2019-10-18 14:56:00 UTC |
| Description | Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNU_accessPassword_recovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D, R4500, R6200, R6200V2, R6250, R6300, R6300v2, R6400, R6700, R6900P, R6900, R7000P, R7000, R7100LG, R7300, R7900, R8000, R8300, R8500, WGR614v10, WN2500RPv2, WNDR3400v2, WNDR3700v3, WNDR4000, WNDR4500, WNDR4500v2, WNR1000, WNR1000v3, WNR3500L, and WNR3500L. |
Risk And Classification
Problem Types: CWE-287
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Netgear | Ac1450 | - | All | All | All |
| Hardware | Netgear | Ac1450 | - | All | All | All |
| Operating System | Netgear | Ac1450 Firmware | - | All | All | All |
| Operating System | Netgear | Ac1450 Firmware | - | All | All | All |
| Hardware | Netgear | D8500 | - | All | All | All |
| Hardware | Netgear | D8500 | - | All | All | All |
| Operating System | Netgear | D8500 Firmware | - | All | All | All |
| Operating System | Netgear | D8500 Firmware | - | All | All | All |
| Hardware | Netgear | Dc112a | - | All | All | All |
| Hardware | Netgear | Dc112a | - | All | All | All |
| Operating System | Netgear | Dc112a Firmware | - | All | All | All |
| Operating System | Netgear | Dc112a Firmware | - | All | All | All |
| Hardware | Netgear | Jndr3000 | - | All | All | All |
| Hardware | Netgear | Jndr3000 | - | All | All | All |
| Operating System | Netgear | Jndr3000 Firmware | - | All | All | All |
| Operating System | Netgear | Jndr3000 Firmware | - | All | All | All |
| Hardware | Netgear | Lg2200d | - | All | All | All |
| Hardware | Netgear | Lg2200d | - | All | All | All |
| Operating System | Netgear | Lg2200d Firmware | - | All | All | All |
| Operating System | Netgear | Lg2200d Firmware | - | All | All | All |
| Hardware | Netgear | R4500 | - | All | All | All |
| Hardware | Netgear | R4500 | - | All | All | All |
| Operating System | Netgear | R4500 Firmware | - | All | All | All |
| Operating System | Netgear | R4500 Firmware | - | All | All | All |
| Hardware | Netgear | R6200 | - | All | All | All |
| Hardware | Netgear | R6200 | - | All | All | All |
| Hardware | Netgear | R6200v2 | - | All | All | All |
| Hardware | Netgear | R6200v2 | - | All | All | All |
| Operating System | Netgear | R6200v2 Firmware | - | All | All | All |
| Operating System | Netgear | R6200v2 Firmware | - | All | All | All |
| Operating System | Netgear | R6200 Firmware | - | All | All | All |
| Operating System | Netgear | R6200 Firmware | - | All | All | All |
| Hardware | Netgear | R6250 | - | All | All | All |
| Hardware | Netgear | R6250 | - | All | All | All |
| Operating System | Netgear | R6250 Firmware | - | All | All | All |
| Operating System | Netgear | R6250 Firmware | - | All | All | All |
| Hardware | Netgear | R6300 | - | All | All | All |
| Hardware | Netgear | R6300 | - | All | All | All |
| Hardware | Netgear | R6300v2 | - | All | All | All |
| Hardware | Netgear | R6300v2 | - | All | All | All |
| Operating System | Netgear | R6300v2 Firmware | - | All | All | All |
| Operating System | Netgear | R6300v2 Firmware | - | All | All | All |
| Operating System | Netgear | R6300 Firmware | - | All | All | All |
| Operating System | Netgear | R6300 Firmware | - | All | All | All |
| Hardware | Netgear | R6400 | - | All | All | All |
| Hardware | Netgear | R6400 | - | All | All | All |
| Operating System | Netgear | R6400 Firmware | - | All | All | All |
| Operating System | Netgear | R6400 Firmware | - | All | All | All |
| Hardware | Netgear | R6700 | - | All | All | All |
| Hardware | Netgear | R6700 | - | All | All | All |
| Operating System | Netgear | R6700 Firmware | - | All | All | All |
| Operating System | Netgear | R6700 Firmware | - | All | All | All |
| Hardware | Netgear | R6900 | - | All | All | All |
| Hardware | Netgear | R6900 | - | All | All | All |
| Hardware | Netgear | R6900p | - | All | All | All |
| Hardware | Netgear | R6900p | - | All | All | All |
| Operating System | Netgear | R6900p Firmware | - | All | All | All |
| Operating System | Netgear | R6900p Firmware | - | All | All | All |
| Operating System | Netgear | R6900 Firmware | - | All | All | All |
| Operating System | Netgear | R6900 Firmware | - | All | All | All |
| Hardware | Netgear | R7000 | - | All | All | All |
| Hardware | Netgear | R7000 | - | All | All | All |
| Hardware | Netgear | R7000p | - | All | All | All |
| Hardware | Netgear | R7000p | - | All | All | All |
| Operating System | Netgear | R7000p Firmware | - | All | All | All |
| Operating System | Netgear | R7000p Firmware | - | All | All | All |
| Operating System | Netgear | R7000 Firmware | - | All | All | All |
| Operating System | Netgear | R7000 Firmware | - | All | All | All |
| Hardware | Netgear | R7100lg | - | All | All | All |
| Hardware | Netgear | R7100lg | - | All | All | All |
| Operating System | Netgear | R7100lg Firmware | - | All | All | All |
| Operating System | Netgear | R7100lg Firmware | - | All | All | All |
| Hardware | Netgear | R7300 | - | All | All | All |
| Hardware | Netgear | R7300 | - | All | All | All |
| Operating System | Netgear | R7300 Firmware | - | All | All | All |
| Operating System | Netgear | R7300 Firmware | - | All | All | All |
| Hardware | Netgear | R7900 | - | All | All | All |
| Hardware | Netgear | R7900 | - | All | All | All |
| Operating System | Netgear | R7900 Firmware | - | All | All | All |
| Operating System | Netgear | R7900 Firmware | - | All | All | All |
| Hardware | Netgear | R8000 | - | All | All | All |
| Hardware | Netgear | R8000 | - | All | All | All |
| Operating System | Netgear | R8000 Firmware | - | All | All | All |
| Operating System | Netgear | R8000 Firmware | - | All | All | All |
| Hardware | Netgear | R8300 | - | All | All | All |
| Hardware | Netgear | R8300 | - | All | All | All |
| Operating System | Netgear | R8300 Firmware | - | All | All | All |
| Operating System | Netgear | R8300 Firmware | - | All | All | All |
| Hardware | Netgear | R8500 | - | All | All | All |
| Hardware | Netgear | R8500 | - | All | All | All |
| Operating System | Netgear | R8500 Firmware | - | All | All | All |
| Operating System | Netgear | R8500 Firmware | - | All | All | All |
| Hardware | Netgear | Wgr614v10 | - | All | All | All |
| Hardware | Netgear | Wgr614v10 | - | All | All | All |
| Operating System | Netgear | Wgr614v10 Firmware | - | All | All | All |
| Operating System | Netgear | Wgr614v10 Firmware | - | All | All | All |
| Hardware | Netgear | Wn2500rpv2 | - | All | All | All |
| Hardware | Netgear | Wn2500rpv2 | - | All | All | All |
| Operating System | Netgear | Wn2500rpv2 Firmware | - | All | All | All |
| Operating System | Netgear | Wn2500rpv2 Firmware | - | All | All | All |
| Hardware | Netgear | Wndr3400v2 | - | All | All | All |
| Hardware | Netgear | Wndr3400v2 | - | All | All | All |
| Operating System | Netgear | Wndr3400v2 Firmware | - | All | All | All |
| Operating System | Netgear | Wndr3400v2 Firmware | - | All | All | All |
| Hardware | Netgear | Wndr3700v3 | - | All | All | All |
| Hardware | Netgear | Wndr3700v3 | - | All | All | All |
| Operating System | Netgear | Wndr3700v3 Firmware | - | All | All | All |
| Operating System | Netgear | Wndr3700v3 Firmware | - | All | All | All |
| Hardware | Netgear | Wndr4000 | - | All | All | All |
| Hardware | Netgear | Wndr4000 | - | All | All | All |
| Operating System | Netgear | Wndr4000 Firmware | - | All | All | All |
| Operating System | Netgear | Wndr4000 Firmware | - | All | All | All |
| Hardware | Netgear | Wndr4500 | - | All | All | All |
| Hardware | Netgear | Wndr4500 | - | All | All | All |
| Hardware | Netgear | Wndr4500v2 | - | All | All | All |
| Hardware | Netgear | Wndr4500v2 | - | All | All | All |
| Operating System | Netgear | Wndr4500v2 Firmware | - | All | All | All |
| Operating System | Netgear | Wndr4500v2 Firmware | - | All | All | All |
| Operating System | Netgear | Wndr4500 Firmware | - | All | All | All |
| Operating System | Netgear | Wndr4500 Firmware | - | All | All | All |
| Hardware | Netgear | Wnr1000 | - | All | All | All |
| Hardware | Netgear | Wnr1000 | - | All | All | All |
| Hardware | Netgear | Wnr1000v3 | - | All | All | All |
| Hardware | Netgear | Wnr1000v3 | - | All | All | All |
| Operating System | Netgear | Wnr1000v3 Firmware | - | All | All | All |
| Operating System | Netgear | Wnr1000v3 Firmware | - | All | All | All |
| Operating System | Netgear | Wnr1000 Firmware | - | All | All | All |
| Operating System | Netgear | Wnr1000 Firmware | - | All | All | All |
| Hardware | Netgear | Wnr3500l | - | All | All | All |
| Hardware | Netgear | Wnr3500l | - | All | All | All |
| Operating System | Netgear | Wnr3500l Firmware | - | All | All | All |
| Operating System | Netgear | Wnr3500l Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| CVE_Request/netgear_cgi_unauthorized_access_vulnerability.md at master · zer0yu/CVE_Request · GitHub | MISC | github.com | Exploit, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.