Detections
Analytics
NETGEAR ProSafe Router Password Disclosure / Port Filtering Bypass
high Nessus Network Monitor Plugin ID 1573
Synopsis
The remote NETGEAR FM114P ProSafe Wireless router discloses the username and the password of the WAN when it receives specially crafted UPnP SOAP requests.Description
The remote NETGEAR FM114P ProSafe Wireless router discloses the username and the password of the WAN when it receives specially crafted UPnP SOAP requests.Solution
Disable UPnP on this device.See Also
http://archives.neohapsis.com/archives/bugtraq/2003-04/0042.html
http://archives.neohapsis.com/archives/bugtraq/2003-04/0053.html
Plugin Details
Severity: High
ID: 1573
Family: Web Servers
Published: 8/20/2004
Updated: 3/6/2019
Nessus ID: 11514
Risk Information
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 7.1
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: High
Base Score: 7.3
Temporal Score: 7.1
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:F/RL:U/RC:X