CVE-2013-4775
high · 7.8NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, and GS725TS with firmware 5.3.0.17; and GS752TXS and GS728TXS with firmware 6.1.0.12 allows remote attackers to read encrypted administrator credentials and other startup configurations via a direct request to filesystem/startup-config.
7.8
CVSS
15.0%
EPSS (exploit prob.)
97th
EPSS percentile
2013-12-19
Published
AV:N/AC:L/Au:N/C:C/I:N/A:N
Weaknesses
CWE-200
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| netgear | prosafe_firmware | 5.3.0.17 |
| netgear | prosafe_gs725ts | all versions |
| netgear | prosafe_gs728tps | all versions |
| netgear | prosafe_gs728ts | all versions |
| netgear | prosafe_gs752tps | all versions |
| netgear | prosafe_firmware | <= 5.4.1.13 |
| netgear | prosafe_firmware | 5.0.4.4 |
| netgear | prosafe_firmware | 5.3.0.17 |
| netgear | prosafe_firmware | 5.4.0.6 |
| netgear | prosafe_firmware | 5.4.1.10 |
| netgear | prosafe_gs724t | v3 |
| netgear | prosafe_s716t | v2 |
| netgear | prosafe_firmware | 6.1.0.12 |
| netgear | prosafe_gs728txs | all versions |
| netgear | prosafe_gs752txs | all versions |
| netgear | prosafe_firmware | <= 5.4.1.14 |
| netgear | prosafe_firmware | 5.0.4.4 |
| netgear | prosafe_firmware | 5.3.0.17 |
| netgear | prosafe_firmware | 5.4.0.6 |
| netgear | prosafe_firmware | 5.4.1.10 |
| netgear | prosafe_firmware | 5.4.1.13 |
| netgear | prosafe_gs748t | v4 |
| netgear | prosafe_firmware | 5.4.0.6 |
| netgear | prosafe_gs510tp | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2013-4775