Multiple NetGear ProSafe Switches CVE-2013-4776 Remote Denial of Service Vulnerability

Bugtraq ID:	61924
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-4776
Remote:	Yes
Local:	No
Published:	Aug 21 2013 12:00AM
Updated:	Aug 21 2013 12:00AM
Credit:	Juan J. Güelfo of Encripto AS
Vulnerable:
Not Vulnerable:

Multiple NetGear ProSafe Switches CVE-2013-4776 Remote Denial of Service Vulnerability

Multiple NetGear ProSafe switches are prone to a remote denial-of-service vulnerability.

Successfully exploiting this issue allows remote attackers to cause denial-of-service conditions.

The following ProSafe products are vulnerable:

GS724Tv3 firmware version 5.4.1.13
GS716Tv2 firmware version 5.4.1.13
GS724Tv3 firmware version 5.4.1.10
GS716Tv2 firmware version 5.4.1.10
GS748Tv4 firmware version 5.4.1.14
GS510TP firmware version 5.0.4.4

Multiple NetGear ProSafe Switches CVE-2013-4776 Remote Denial of Service Vulnerability

Attackers can use a browser to exploit this issue.

The following example URI and exploit code are available:

http://www.example.com/filesystem/

• /data/vulnerabilities/exploits/61924.py

Multiple NetGear ProSafe Switches CVE-2013-4776 Remote Denial of Service Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple NetGear ProSafe Switches CVE-2013-4776 Remote Denial of Service Vulnerability

References:

• Netgear Homepage (NetGear)