NetGear ProSafe Dual Band Wireless VPN Firewall Default SNMP Community String Vulnerability

Bugtraq ID:	11580
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 02 2004 12:00AM
Updated:	Nov 02 2004 12:00AM
Credit:	Discovery is credited to Lyndon Dubeau.
Vulnerable:	NetGear ProSafe Dual Band Wireless VPN Firewall FWAG114
Not Vulnerable:

NetGear ProSafe Dual Band Wireless VPN Firewall Default SNMP Community String Vulnerability

ProSafe Dual Band Wireless VPN Firewall is reported prone to a vulnerability that can allow remote attackers to gain sensitive information about a network protected by the device.

This issue presents itself because the appliance uses a default community string for SNMP.

NetGear ProSafe Dual Band Wireless VPN Firewall model FWAG114 is reported prone to this issue.

NetGear ProSafe Dual Band Wireless VPN Firewall Default SNMP Community String Vulnerability

An exploit is not required.

NetGear ProSafe Dual Band Wireless VPN Firewall Default SNMP Community String Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

NetGear ProSafe Dual Band Wireless VPN Firewall Default SNMP Community String Vulnerability

References:

• ProSafe Dual Band Wireless VPN Firewall (NetGear)