NETGEAR CG3100D Remote Security Bypass and Privilege Escalation Vulnerabilities

Bugtraq ID:	44102
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 14 2010 12:00AM
Updated:	Oct 14 2010 12:00AM
Credit:	Alejandra Alvarez
Vulnerable:	NetGear CG3100D 5.5.2
Not Vulnerable:

NETGEAR CG3100D Remote Security Bypass and Privilege Escalation Vulnerabilities

The NETGEAR CG3100D Residential Gateway is prone to a security-bypass vulnerability and a local privilege-escalation vulnerability.

Attackers can exploit these issues to gain elevated privileges on the affected application and gain unauthorized access. Other attacks are also possible.

NETGEAR CG3100D firmware version 5.5.2 is vulnerable; other models may also be affected.

NETGEAR CG3100D Remote Security Bypass and Privilege Escalation Vulnerabilities

Attackers can exploit these issues using readily available tools.

NETGEAR CG3100D Remote Security Bypass and Privilege Escalation Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

NETGEAR CG3100D Remote Security Bypass and Privilege Escalation Vulnerabilities

References:

• Netgear CG3000/CG3100 bugs (Alejandro Alvarez)
  
• Netgear Homepage (NetGear)