CVE-2013-4775

CVSS V2 High 7.8 CVSS V3 None
Description
NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, and GS725TS with firmware 5.3.0.17; and GS752TXS and GS728TXS with firmware 6.1.0.12 allows remote attackers to read encrypted administrator credentials and other startup configurations via a direct request to filesystem/startup-config.
Overview
  • CVE ID
  • CVE-2013-4775
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2013-12-19T04:24:48
  • Last Modified Date
  • 2013-12-19T19:19:08
Weakness Enumerations
CWE URL
CWE-200 http://cwe.mitre.org/data/definitions/200.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:netgear:prosafe_firmware:5.3.0.17:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netgear:prosafe_gs725ts:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netgear:prosafe_gs728tps:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netgear:prosafe_gs728ts:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netgear:prosafe_gs752tps:-:*:*:*:*:*:*:* 1 OR
AND
cpe:2.3:o:netgear:prosafe_firmware:*:*:*:*:*:*:*:* 1 OR 5.4.1.13
cpe:2.3:o:netgear:prosafe_firmware:5.0.4.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:netgear:prosafe_firmware:5.3.0.17:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:netgear:prosafe_firmware:5.4.0.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:netgear:prosafe_firmware:5.4.1.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netgear:prosafe_gs724t:v3:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netgear:prosafe_s716t:v2:*:*:*:*:*:*:* 1 OR
AND
cpe:2.3:o:netgear:prosafe_firmware:6.1.0.12:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netgear:prosafe_gs728txs:-:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netgear:prosafe_gs752txs:-:*:*:*:*:*:*:* 1 OR
AND
cpe:2.3:o:netgear:prosafe_firmware:*:*:*:*:*:*:*:* 1 OR 5.4.1.14
cpe:2.3:o:netgear:prosafe_firmware:5.0.4.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:netgear:prosafe_firmware:5.3.0.17:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:netgear:prosafe_firmware:5.4.0.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:netgear:prosafe_firmware:5.4.1.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:netgear:prosafe_firmware:5.4.1.13:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netgear:prosafe_gs748t:v4:*:*:*:*:*:*:* 1 OR
AND
cpe:2.3:o:netgear:prosafe_firmware:5.4.0.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:netgear:prosafe_gs510tp:-:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:C/I:N/A:N
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • NONE
  • Availability Impact
  • NONE
  • Base Score
  • 7.8
  • Severity
  • HIGH
  • Exploitability Score
  • 10
  • Impact Score
  • 6.9
References
Reference URL Reference Tags
http://www.encripto.no/forskning/whitepapers/Netgear_prosafe_advisory_aug_2013.pdf Exploit
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2013-4775
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4775
History
Created Old Value New Value Data Type Notes
2022-05-10 10:39:23 Added to TrackCVE
2022-12-01 21:17:02 2013-12-19T04:24Z 2013-12-19T04:24:48 CVE Published Date updated
2022-12-01 21:17:02 2013-12-19T19:19:08 CVE Modified Date updated
2022-12-01 21:17:02 Analyzed Vulnerability Status updated