First published: Thu Feb 06 2020(Updated: )
An Information Disclosure vulnerability exists in the my config file in NEtGEAR WGR614 v7 and v9, which could let a malicious user recover all previously used passwords on the device, for both the control panel and WEP/WPA/WPA2, in plaintext. This is a different issue than CVE-2012-6340.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Netgear WGR614v9 Firmware | ||
Netgear WGR614v9 Firmware | ||
Netgear WGR614v7 Firmware | ||
Netgear WGR614 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-6341 is an Information Disclosure vulnerability in the my config file in NETGEAR WGR614 v7 and v9.
CVE-2012-6341 allows a malicious user to recover all previously used passwords on the device, including control panel and WEP/WPA/WPA2 passwords, in plaintext.
CVE-2012-6341 has a severity rating of 6.5 (Medium).
To fix CVE-2012-6341, it is recommended to update the firmware of NETGEAR WGR614 v7 and v9 to the latest version provided by NETGEAR.
More information about CVE-2012-6341 can be found at the following references: [link1](https://packetstormsecurity.com/files/date/2012-12-14/) and [link2](https://www.securityfocus.com/archive/1/525042).