high7.8Public exploit code
CVE-2013-4775
NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS752TPS, GS728TPS, G…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Netgear ProSafe - Information Disclosure2013-08-22 · webapps · hardware
Impact
NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, and GS725TS with firmware 5.3.0.17; and GS752TXS and GS728TXS with firmware 6.1.0.12 allows remote attackers to read encrypted administrator credentials and other startup configurations via a direct request to filesystem/startup-config.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Prosafe Firmware | through 5.4.1.13 Versions 5.3.0.17, 5.0.4.4, 5.4.0.6, 5.4.1.10, 6.1.0.12 |
| Netgear | Prosafe Gs725ts | All versions |
| Netgear | Prosafe Gs728tps | All versions |
| Netgear | Prosafe Gs728ts | All versions |
| Netgear | Prosafe Gs752tps | All versions |
| Netgear | Prosafe Gs724t | Version v3 |
| Netgear | Prosafe S716t | Version v2 |
| Netgear | Prosafe Gs728txs | All versions |
| Netgear | Prosafe Gs752txs | All versions |
| Netgear | Prosafe Gs748t | Version v4 |
| Netgear | Prosafe Gs510tp | All versions |