CVE-2017-5521
NETGEAR Multiple Devices
NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
What it is
Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server.
What to do
Apply updates per vendor instructions. If the affected device has since entered end-of-life, it should be disconnected if still in use.
Vendor notices and references
- kb.netgear.com/30632/Web-GUI-Password-Recovery-and-Exposure-Security-Vulnerability
- nvd.nist.gov/vuln/detail/CVE-2017-5521
Description and required action as published by CISA. Full record at NVD.
Other NETGEAR entries on the list
- Multiple Devices NETGEAR Multiple Devices Buffer Overflow Vulnerability CVE-2017-6862 · Jun 8, 2022
- DGN2200 Devices NETGEAR DGN2200 Devices OS Command Injection Vulnerability CVE-2017-6334 · Mar 25, 2022
- Wireless Access Point (WAP) Devices NETGEAR Multiple WAP Devices Command Injection Vulnerability CVE-2016-1555 · Mar 25, 2022
- WNR2000v5 Router NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CVE-2016-10174 · Mar 25, 2022
- Wireless Router DGN2200 NETGEAR DGN2200 Remote Code Execution Vulnerability CVE-2017-6077 · Mar 7, 2022
- Multiple Routers NETGEAR Multiple Routers Remote Code Execution Vulnerability CVE-2016-6277 · Mar 7, 2022