CVEvulnerability

CVE-2013-4775

7.8 HIGH Published 2013-12-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-12-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
Weaknesses
CWE-200

Description

NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, and GS725TS with firmware 5.3.0.17; and GS752TXS and GS728TXS with firmware 6.1.0.12 allows remote attackers to read encrypted administrator credentials and other startup configurations via a direct request to filesystem/startup-config.

Affected configurations

• netgear prosafe firmware 5.3.0.17 • netgear prosafe gs725ts • netgear prosafe gs728tps • netgear prosafe gs728ts • netgear prosafe gs752tps • netgear prosafe firmware (<= 5.4.1.13) • netgear prosafe firmware 5.0.4.4 • netgear prosafe firmware 5.4.0.6 • netgear prosafe firmware 5.4.1.10 • netgear prosafe gs724t v3 • netgear prosafe s716t v2 • netgear prosafe firmware 6.1.0.12 • netgear prosafe gs728txs • netgear prosafe gs752txs • netgear prosafe firmware (<= 5.4.1.14) • netgear prosafe firmware 5.4.1.13 • netgear prosafe gs748t v4 • netgear prosafe gs510tp

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References