CVE-2014-4864: Low severity netgear prosafe firmware vulnerability
Published Sep 10, 2014
·Updated
The NETGEAR ProSafe Plus Configuration Utility creates configuration backup files containing cleartext passwords, which might allow remote attackers to obtain sensitive information by reading a file.
Affected Software
1 affected component
Netgear Prosafe Firmware<=6.1.0.12
Event History
Sep 10, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-4864?
CVE-2014-4864 is considered a high severity vulnerability due to the exposure of cleartext passwords.
2
How do I fix CVE-2014-4864?
To fix CVE-2014-4864, update your NETGEAR ProSafe Plus Configuration Utility to a version newer than 6.1.0.12.
3
What types of information are exposed in CVE-2014-4864?
CVE-2014-4864 exposes sensitive information such as configuration backup files containing cleartext passwords.
4
Who is affected by CVE-2014-4864?
CVE-2014-4864 affects users of the NETGEAR ProSafe Plus Configuration Utility with firmware versions up to 6.1.0.12.
5
Can CVE-2014-4864 be exploited remotely?
Yes, CVE-2014-4864 can be exploited remotely, allowing attackers to read cleartext password files.