CVE-2016-5649: Netgear DGN2200 and DGND3700 disclose the administrator password
A vulnerability is in the 'BSWcxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.507.0.50, and DGND3700, version DGND3700-V1.0.0.171.0.17, which can allow a remote attacker to access this page without any authentication. When processed, it exposes the admin password in clear text before it gets redirected to abswvfysucc.cgia. An attacker can use this password to gain administrator access to the targeted router's web interface.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5649?
The severity of CVE-2016-5649 is critical.
How does CVE-2016-5649 affect Netgear DGN2200 version DGN2200-V1.0.0.50_7.0.50 and DGND3700 version DGND3700-V1.0.0.17_1.0.17?
CVE-2016-5649 allows a remote attacker to access the 'BSW_cxttongr.htm' page without authentication, exposing the admin password in clear text.
Which software versions of Netgear DGN2200 and DGND3700 are affected by CVE-2016-5649?
Netgear DGN2200 version DGN2200-V1.0.0.50_7.0.50 and DGND3700 version DGND3700-V1.0.0.17_1.0.17 are affected by CVE-2016-5649.
How can an attacker exploit CVE-2016-5649?
An attacker can exploit CVE-2016-5649 by accessing the 'BSW_cxttongr.htm' page without authentication and retrieving the admin password in clear text.
Are Netgear DGN2200 and DGND3700 vulnerable to CVE-2016-5649?
Yes, Netgear DGN2200 and DGND3700 are vulnerable to CVE-2016-5649.