medium5.9
CVE-2015-8288
NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers…
Impact
NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | D3600 Firmware | Version 1.0.0.49 |
| Netgear | D6000 Firmware | through 1.0.0.49 |