CVEs-PoC/2015/CVE-2015-8289.md

CVE-2015-8289

Description

The password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier allows remote attackers to discover the cleartext administrator password by reading the cgi-bin/passrec.asp HTML source code.

POC

Reference

• http://kb.netgear.com/app/answers/detail/a_id/30490
• http://kb.netgear.com/app/answers/detail/a_id/30490
• http://www.kb.cert.org/vuls/id/778696
• http://www.kb.cert.org/vuls/id/778696

Github

No PoCs found on GitHub currently.