NetGear WG102 SNMP Write Community String Information Disclosure Vulnerability

Bugtraq ID:	33181
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 09 2009 12:00AM
Updated:	Jan 09 2009 05:52PM
Credit:	Harm S.I. Vaittes
Vulnerable:	NetGear WG102 firmware 4.0.27 NetGear WG102 firmware 4.0.16
Not Vulnerable:

NetGear WG102 SNMP Write Community String Information Disclosure Vulnerability

The NetGear WG102 is prone to a remote information-disclosure issue because it fails to restrict access to sensitive information.

A remote attacker may be able to access the Simple Network Management Protocol (SNMP) read community and exploit this issue to obtain sensitive information, possibly aiding in further attacks.

The WG102 with firmware 4.0.16 and 4.0.27 is vulnerable; other firmware versions may also be affected.

NetGear WG102 SNMP Write Community String Information Disclosure Vulnerability

An attacker may exploit this issue via widely available tools.

The following example exploit is available:

snmpwalk -c READPASSWORD -v2c IP SNMPv2-SMI::enterprises.4526.4.3

the passwords are stored in ...4526.4.3.8.4.0 and ...4526.4.3.8.5.0

NetGear WG102 SNMP Write Community String Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

NetGear WG102 SNMP Write Community String Information Disclosure Vulnerability

References:

• WG102 Homepage (NetGear)
  
• Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosafe ([email protected])
  
• Re: Leak of SNMP write password via SNMP read community in NETGEAR WG102 - Prosa (Simon Richter )