Netgear D6300B Router Multiple Security Vulnerabilities

Bugtraq ID:	65444
Class:	Unknown
CVE:
Remote:	Yes
Local:	Yes
Published:	Feb 05 2014 12:00AM
Updated:	Jul 14 2014 12:17AM
Credit:	Marcel Mangold and Pascal Uter
Vulnerable:
Not Vulnerable:

Netgear D6300B Router Multiple Security Vulnerabilities

The Netgear D6300B router is prone to the following security vulnerabilities:

1. Multiple unauthorized-access vulnerabilities
2. A command-injection vulnerability
3. An information disclosure vulnerability

An attacker can exploit these issues to gain access to potentially sensitive information, execute arbitrary commands in the context of the affected device, and perform unauthorized actions. Other attacks are also possible.

Netgear D6300B 1.0.0.14_1.0.14 is vulnerable; other versions may also be affected.

Netgear D6300B Router Multiple Security Vulnerabilities

An attacker can exploit these issues through readily available tools and a browser.

The following example data is available:

• /data/vulnerabilities/exploits/65444.txt

Netgear D6300B Router Multiple Security Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Netgear D6300B Router Multiple Security Vulnerabilities

References: