CVE-2015-8289 | BDVDB-2026-76590 Detail

Description#

The password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier allows remote attackers to discover the cleartext administrator password by reading the cgi-bin/passrec.asp HTML source code.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.kb.cert.org/vuls/id/778696
http://kb.netgear.com/app/answers/detail/a_id/30490

Exploit#

No public exploit known

History#

Version 12016-06-20Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.