high7.5
CVE-2015-8289
The password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier allows remote attackers to d…
Impact
The password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier allows remote attackers to discover the cleartext administrator password by reading the cgi-bin/passrec.asp HTML source code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | D3600 Firmware | Version 1.0.0.49 |
| Netgear | D6000 Firmware | through 1.0.0.49 |