CVE-2017-5521

mediumPriorität · handeln · 90OT-Risiko · kritischKEV · ausgenutztEPSS 0.894 · 100. PerzentilExploit · funktionalEURUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV · 2 exploits · funktional

Likely / severe?

89.4% (100th) EPSS

CVSS 4.3 · medium

Is it mine?

46 products

Prüfe deine Angriffsfläche

Who says so?

3 sources

cnnvd · enisa_euvd · fstec_bdu

hinzugefügt 2022-09-08beheben bis 2022-09-29

erforderliche Maßnahme Apply updates per vendor instructions. If the affected device has since entered end-of-life, it should be disconnected if still in use.

EPSS · bewertet 2026-10-27

NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability

An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. They are prone to password disclosure via simple crafted requests to the web management server. The bug is exploitable remotely if the remote management option is set, and can also be exploited given access to the router over LAN or WLAN. When trying to access the web panel, a user is asked to authenticate; if the authentication is canceled and password recovery is not enabled, the user is redirected to a page that exposes a password recovery token. If a user supplies the correct token to the page /passwordrecovered.cgi?id=TOKEN (and password recovery is not enabled), they will receive the admin password for the router. If password recovery is set the exploit will fail, as it will ask the user for the recovery questions that were previously set when enabling that feature. This is persistent (even after disabling the recovery option, the exploit will fail) because the router will ask for the security questions.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.1

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.3–8.1

v2.04.3mediumAV:N/AC:M/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 8.6 · Auswirkung 2.9

v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 2.2 · Auswirkung 5.9

v2.04.3mediumAV:N/AC:M/Au:N/C:P/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HsecondaryAusnutzbarkeit 2.2 · Auswirkung 5.9

v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: active · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-200US

Exploits (2)

Öffentlicher Proof-of-Concept- und Exploit-Code.

EDB-41205Netgear Routers - Password Disclosurefunktional · exploit_db
auxiliary/gather/netgear_password_disclosureNETGEAR Administrator Password Disclosurefunktional · metasploit

betroffene Produkte (46)

Betroffene Produkte und Versionsbereiche.

n/a n/a≤ n/aenisa_euvdEU
NETGEAR AC1450≤ 1.0.0.34_10.0.16fstec_bduRU
NETGEAR C6300≤ 2.01.18fstec_bduRU
NETGEAR D6220≤ 1.0.0.22fstec_bduRU
NETGEAR D6300≤ 1.0.0.96fstec_bduRU
NETGEAR D6300B≤ 1.0.0.40fstec_bduRU
NETGEAR D6400≤ 1.0.0.56fstec_bduRU
NETGEAR DGN2200Bv4≤ 1.0.0.68fstec_bduRU
NETGEAR DGN2200v4≤ 1.0.0.76fstec_bduRU
NETGEAR R6200≤ 1.0.1.56_1.0.43fstec_bduRU
NETGEAR R6200v2≤ 1.0.3.12fstec_bduRU
NETGEAR R6250≤ 1.0.4.8fstec_bduRU
NETGEAR R6300≤ 1.0.2.78_1.0.58fstec_bduRU
NETGEAR R6300v2≤ 1.0.4.6fstec_bduRU
NETGEAR R6400≤ 1.0.1.18fstec_bduRU
NETGEAR R6700≤ 1.0.1.16fstec_bduRU
NETGEAR R6900≤ 1.0.1.16fstec_bduRU
NETGEAR R7000≤ 1.0.7.6fstec_bduRU
NETGEAR R7100LG≤ 1.0.0.28fstec_bduRU
NETGEAR R7300DST≤ 1.0.0.46fstec_bduRU

20 von 46 angezeigt

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu NVD CVE.org MITRE

veröffentlicht 2017-01-17geändert 2026-06-17

Referenzen (8)

Externe Belege — Patches, Meldungen, Analysen.

http://kb.netgear.com/30632/Web-GUI-Password-Recovery-and-Exposure-Security-Vulnerability cnnvd
http://kb.netgear.com/30632/Web-GUI-Password-Recovery-and-Exposure-Security-Vulnerability enisa_euvd
http://www.securityfocus.com/bid/95457 enisa_euvd
https://www.exploit-db.com/exploits/41205/enisa_euvd
http://kb.netgear.com/30632/Web-GUI-Password-Recovery-and-Exposure-Security-VulnerabilityVendor Advisorynvd
http://www.securityfocus.com/bid/95457Broken LinkThird Party AdvisoryVDB Entrynvd
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5521US Government Resourcenvd
https://www.exploit-db.com/exploits/41205/ExploitThird Party AdvisoryVDB Entrynvd

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan