漏洞描述
【漏洞对象】Netgear 【涉及版本】DGN2200-V1.0.0.50_7.0.50、DGND3700-V1.0.0.17_1.0.17 【漏洞描述】DGN2200-V1.0.0.50_7.0.50、DGND3700-V1.0.0.17_1.0.17在访问BSW_cxttongr.htm会直接返回密码导致登录口令泄露。
Netgear DGN2200 DGND3700 BSW_cxttongr.htm-登录口令泄漏(CVE-2016-5649)
PoC代码
暂无相关漏洞推荐
- POC CVE-2016-5649: NETGEAR DGN2200 / DGND3700 - Admin Password Disclosure
- POC CVE-2021-20167: Netgear RAX43 1.0.3.96 - Command Injection/Authentication Bypass Buffer Overrun
- POC CVE-2024-30568: Netgear R6850 V1.1.0.88 - Command Injection
- POC CVE-2024-30569: Netgear R6850 - Information Disclosure
- POC CVE-2024-30570: Netgear R6850 - Information Disclosure
- POC CVE-2024-57046: Netgear DGN2200 - Improper Authentication
- POC CVE-2024-6646: Netgear-WN604 downloadFile.php - Information Disclosure
- POC netgear-boarddataww-rce: Netgear Devices boardDataWW.php - Remote Command Execution
- POC dlink-netgear-xss: Dlink DSR-250 and Netgear Prosafe - Cross-Site Scripting
- POC netgear-dgn-rce: Netgear DGN Devices - Command Execution
- POC netgear-wnr614-auth-bypass: Netgear WNR614 - Improper Authentication
- POC netgear-router-auth-bypass: NETGEAR DGN2200v1 - Authentication Bypass
- Netgear 路由器多版本管理后台 downloadFile.php 信息泄露漏洞(CVE-2024-6646)