NetGear DGN2200B Wireless Router Multiple Security Vulnerabilities
BID:57998
Info
NetGear DGN2200B Wireless Router Multiple Security Vulnerabilities
| Bugtraq ID: | 57998 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 18 2013 12:00AM |
| Updated: | Apr 22 2013 06:50AM |
| Credit: | Michael Messner |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
NetGear DGN2200B Wireless Router Multiple Security Vulnerabilities
The NetGear DGN2200B wireless router is prone to multiple security vulnerabilities, including:
1. A command-injection vulnerability
2. An information-disclosure vulnerability
3. Multiple HTML-injection vulnerabilities
Exploiting these issues may allow an attacker to obtain potentially sensitive information, execute arbitrary commands, execute HTML and script code in the context of the affected site, steal cookie-based authentication credentials, or control how the site is rendered to the user; other attacks are also possible.
NetGear DGN2200B wireless routers running firmware version 1.0.0.36_7.0.36 is vulnerable.
The NetGear DGN2200B wireless router is prone to multiple security vulnerabilities, including:
1. A command-injection vulnerability
2. An information-disclosure vulnerability
3. Multiple HTML-injection vulnerabilities
Exploiting these issues may allow an attacker to obtain potentially sensitive information, execute arbitrary commands, execute HTML and script code in the context of the affected site, steal cookie-based authentication credentials, or control how the site is rendered to the user; other attacks are also possible.
NetGear DGN2200B wireless routers running firmware version 1.0.0.36_7.0.36 is vulnerable.
Exploit / POC
NetGear DGN2200B Wireless Router Multiple Security Vulnerabilities
Attackers can exploit these issues through a browser.
The following example request and exploits are available:
Attackers can exploit these issues through a browser.
The following example request and exploits are available:
Solution / Fix
NetGear DGN2200B Wireless Router Multiple Security Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
NetGear DGN2200B Wireless Router Multiple Security Vulnerabilities
References:
References: