Multiple NetGear ProSafe Switches CVE-2013-4775 Information Disclosure Vulnerability

Bugtraq ID:	61918
Class:	Input Validation Error
CVE:	CVE-2013-4775
Remote:	Yes
Local:	No
Published:	Aug 21 2013 12:00AM
Updated:	Aug 21 2013 12:00AM
Credit:	Juan J. Güelfo at Encripto AS
Vulnerable:
Not Vulnerable:

Multiple NetGear ProSafe Switches CVE-2013-4775 Information Disclosure Vulnerability

Multiple NetGear ProSafe switches are prone to an information-disclosure vulnerability.

An attacker can exploit this issue to download configuration file and disclose sensitive information. Information obtained may aid in further attacks.

Multiple NetGear ProSafe Switches CVE-2013-4775 Information Disclosure Vulnerability

Attackers can use a browser to exploit this issue.

The following exploit code is available:

• /data/vulnerabilities/exploits/61918.py

Multiple NetGear ProSafe Switches CVE-2013-4775 Information Disclosure Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple NetGear ProSafe Switches CVE-2013-4775 Information Disclosure Vulnerability

References:

• Netgear Homepage (NetGear)