CVE-2013-4775
High
Description
NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, and GS725TS with firmware 5.3.0.17; and GS752TXS and GS728TXS with firmware 6.1.0.12 allows remote attackers to read encrypted administrator credentials and other startup configurations via a direct request to filesystem/startup-config.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Netgear Prosafe Firmware
PublishedDec 19, 2013
First seenDec 19, 2013
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear prosafe_firmware | 5.3.0.17, v ≤ 5.4.1.13, 5.0.4.4, 5.4.0.6, 5.4.1.10, 6.1.0.12, v ≤ 5.4.1.14, 5.4.1.13 | — |
| netgear prosafe_gs725ts | No range specified | — |
| netgear prosafe_gs728tps | No range specified | — |
| netgear prosafe_gs728ts | No range specified | — |
| netgear prosafe_gs752tps | No range specified | — |
| netgear prosafe_gs724t | v3 | — |
| netgear prosafe_s716t | v2 | — |
| netgear prosafe_gs728txs | No range specified | — |
| netgear prosafe_gs752txs | No range specified | — |
| netgear prosafe_gs748t | v4 | — |
| netgear prosafe_gs510tp | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.