FKIE_CVE-2013-4775

Vulnerability from fkie_nvd - Published: 2013-12-19 04:24 - Updated: 2025-04-11 00:51
Severity ?
Summary
NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, and GS725TS with firmware 5.3.0.17; and GS752TXS and GS728TXS with firmware 6.1.0.12 allows remote attackers to read encrypted administrator credentials and other startup configurations via a direct request to filesystem/startup-config.
References
cve@mitre.orghttp://www.encripto.no/forskning/whitepapers/Netgear_prosafe_advisory_aug_2013.pdfExploit
af854a3a-2127-422b-91ae-364da2661108http://www.encripto.no/forskning/whitepapers/Netgear_prosafe_advisory_aug_2013.pdfExploit
Impacted products
Vendor Product Version
netgear prosafe_firmware 5.3.0.17
netgear prosafe_gs725ts -
netgear prosafe_gs728tps -
netgear prosafe_gs728ts -
netgear prosafe_gs752tps -
netgear prosafe_firmware *
netgear prosafe_firmware 5.0.4.4
netgear prosafe_firmware 5.3.0.17
netgear prosafe_firmware 5.4.0.6
netgear prosafe_firmware 5.4.1.10
netgear prosafe_gs724t v3
netgear prosafe_s716t v2
netgear prosafe_firmware 6.1.0.12
netgear prosafe_gs728txs -
netgear prosafe_gs752txs -
netgear prosafe_firmware *
netgear prosafe_firmware 5.0.4.4
netgear prosafe_firmware 5.3.0.17
netgear prosafe_firmware 5.4.0.6
netgear prosafe_firmware 5.4.1.10
netgear prosafe_firmware 5.4.1.13
netgear prosafe_gs748t v4
netgear prosafe_firmware 5.4.0.6
netgear prosafe_gs510tp -
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:prosafe_firmware:5.3.0.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "554F724F-FC50-4625-8132-4615C6E068ED",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:prosafe_gs725ts:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7C4A5E9-4BC8-487E-AC37-340D9521CD6A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:netgear:prosafe_gs728tps:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "41BF7F4E-E887-49D4-837B-6B87581BF1C5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:netgear:prosafe_gs728ts:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C2842C83-3BEC-465E-8517-B1BF0BF89656",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:netgear:prosafe_gs752tps:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "ECD778B1-CCD5-4A89-B22E-9AD552C89190",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:prosafe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB6E7562-34FA-4E97-A0D8-B28E2E731F9A",
              "versionEndIncluding": "5.4.1.13",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:netgear:prosafe_firmware:5.0.4.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "40B5584E-F422-4E80-B332-3D1B41E0AA29",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:netgear:prosafe_firmware:5.3.0.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "554F724F-FC50-4625-8132-4615C6E068ED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:netgear:prosafe_firmware:5.4.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AEF174C-AFBB-427D-A328-5DDB01B89921",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:netgear:prosafe_firmware:5.4.1.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "9F8F3AB1-9A0A-43FB-A15F-4019EAC4AF17",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:prosafe_gs724t:v3:*:*:*:*:*:*:*",
              "matchCriteriaId": "B14242B7-165D-4809-ADC6-F7C5DC4F9F7E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:netgear:prosafe_s716t:v2:*:*:*:*:*:*:*",
              "matchCriteriaId": "99594573-A11E-47DB-B5E7-5EE2D52E812A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:prosafe_firmware:6.1.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "C8B9D972-C983-48E8-A01B-AD7C79A0E739",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:prosafe_gs728txs:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F1AE378-DCDD-4D2D-AB85-4808BAB6C4F5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:netgear:prosafe_gs752txs:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBE03F4C-37A5-4CF9-910C-654CF4032699",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:prosafe_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "858103B7-F545-42ED-A24B-4DD75613CF28",
              "versionEndIncluding": "5.4.1.14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:netgear:prosafe_firmware:5.0.4.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "40B5584E-F422-4E80-B332-3D1B41E0AA29",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:netgear:prosafe_firmware:5.3.0.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "554F724F-FC50-4625-8132-4615C6E068ED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:netgear:prosafe_firmware:5.4.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AEF174C-AFBB-427D-A328-5DDB01B89921",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:netgear:prosafe_firmware:5.4.1.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "9F8F3AB1-9A0A-43FB-A15F-4019EAC4AF17",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:netgear:prosafe_firmware:5.4.1.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "0111C987-B1CD-47A2-9140-365B08ACF764",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:prosafe_gs748t:v4:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7D8B404-2B20-425E-AA3C-22CD19E44386",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:prosafe_firmware:5.4.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AEF174C-AFBB-427D-A328-5DDB01B89921",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:prosafe_gs510tp:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "765A5DC4-0520-4681-8F47-014FEB260256",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, and GS725TS with firmware 5.3.0.17; and GS752TXS and GS728TXS with firmware 6.1.0.12 allows remote attackers to read encrypted administrator credentials and other startup configurations via a direct request to filesystem/startup-config."
    },
    {
      "lang": "es",
      "value": "NETGEAR ProSafe GS724Tv3 y GS716Tv2 con firmware 5.4.1.13 y anteriores; GS748Tv4 con firmware 5.4.1.14; GS510TP con firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, y GS725TS con firmware 5.3.0.17; y GS752TXS y GS728TXS con firmware 6.1.0.12 permite a atacantes remotos leer credenciales de administrador cifradas y otras configuraciones de inicio a trav\u00e9s de una petici\u00f3n directa a filesystem/startup-config."
    }
  ],
  "id": "CVE-2013-4775",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 7.8,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2013-12-19T04:24:48.493",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.encripto.no/forskning/whitepapers/Netgear_prosafe_advisory_aug_2013.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.encripto.no/forskning/whitepapers/Netgear_prosafe_advisory_aug_2013.pdf"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.