CVEvulnerability

CVE-2015-8288

5.9 MEDIUM Published 2016-06-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-06-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N

Description

NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Affected configurations

• netgear d3600 firmware 1.0.0.49 • netgear d6000 firmware (<= 1.0.0.49)

References