CVE-2013-2751: Code Injection
Eval injection vulnerability in frontview/lib/nphandler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute arbitrary Perl code via a crafted request, related to the "forgot password workflow."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2751?
CVE-2013-2751 is rated as a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-2013-2751?
To fix CVE-2013-2751, upgrade your NETGEAR ReadyNAS RAIDiator to version 4.1.12 or 4.2.24 and later.
What types of attacks can CVE-2013-2751 facilitate?
CVE-2013-2751 can facilitate remote code execution attacks by allowing attackers to execute arbitrary Perl code.
Which NETGEAR products are affected by CVE-2013-2751?
CVE-2013-2751 affects NETGEAR ReadyNAS models running RAIDiator versions prior to 4.1.12 and 4.2.x prior to 4.2.24.
What is the exploit methodology for CVE-2013-2751?
The exploit for CVE-2013-2751 involves sending a crafted request related to the 'forgot password workflow' in the FrontView web interface.