Netgear WGT624 Wireless Firewall Router Information Disclosure Vulnerability

Bugtraq ID:	16837
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 27 2006 12:00AM
Updated:	Mar 01 2006 05:16AM
Credit:	Discovery credited to <[email protected]>.
Vulnerable:	NetGear WGT624 0
Not Vulnerable:

Netgear WGT624 Wireless Firewall Router Information Disclosure Vulnerability

A vulnerability has been reported in NetGear WGT624 Wireless Firewall Routers.

When configured to back up configuration settings, the device will store various information in cleartext. Accessing this file could allow an attacker to obtain sensitive information that could aid in compromising the device's web administration interface.

Note that the backup option is not enabled by default, but is a common feature used by administrators.

Netgear WGT624 Wireless Firewall Router Information Disclosure Vulnerability

There is no exploit code necessary.

Netgear WGT624 Wireless Firewall Router Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Netgear WGT624 Wireless Firewall Router Information Disclosure Vulnerability

References:

• WGT624 Family Support Page with Links (NetGear)
  
• NETGEAR WGT624 ~V Wireless DSL Firewall/Router vulnerability ([email protected])