ID de Prueba:	1.3.6.1.4.1.25623.1.0.105223
Categoría:	Web application abuses
Título:	NetGear WNDR Authentication Bypass / Information Disclosure
Resumen:	A number of NetGear WNDR devices contain an embedded SOAP service that; is seemingly for use with the NetGear Genie application. This service allows for viewing and setting of certain; router parameters. This SOAP service is prone to an authentication bypass.
Descripción:	Summary: A number of NetGear WNDR devices contain an embedded SOAP service that is seemingly for use with the NetGear Genie application. This service allows for viewing and setting of certain router parameters. This SOAP service is prone to an authentication bypass. Vulnerability Impact: Affected devices can be interrogated and hijacked Affected Software/OS: Platforms / Firmware confirmed affected: NetGear WNDR3700v4 - V1.0.0.4SH NetGear WNDR3700v4 - V1.0.1.52 NetGear WNR2200 - V1.0.1.88 NetGear WNR2500 - V1.0.0.24 Additional platforms believed to be affected: NetGear WNDR3800 NetGear WNDRMAC NetGear WPN824N NetGear WNDR4700 Solution: Ask the vendor for an update. Ensure remote WAN management is disabled on the affected devices. Only allow trusted devices access to the local network. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.