漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Netgear WNDR4500 running firmware version V1.0.1.40_1.0.6877 reveals some sensitive information such as 2.4GHz & 5GHz Wireless Network Name (SSID) and Network Key (Password) in clear text
Vulnerability Description
There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.40_1.0.6877. Genie app adds some capabilities over the Web GUI and can be accessed even when you are away from home. A remote attacker can access genie_ping.htm or genie_ping2.htm or genie_ping3.htm page without authentication. Once accessed, the page will be redirected to the aCongratulations2.htma page, which reveals some sensitive information such as 2.4GHz & 5GHz Wireless Network Name (SSID) and Network Key (Password) in clear text.
CVSS Information
N/A
Vulnerability Type
敏感数据的明文传输
Vulnerability Title
Netgear WNDR4500 信息泄露漏洞
Vulnerability Description
Netgear WNDR4500是美国网件(NetGear)公司的一款无线路由器产品。 使用1.0.1.40_1.0.6877版本固件的Netgear WNDR4500中存在信息泄露漏洞。远程攻击者可利用该漏洞未经认证访问genie_ping.htm、genie_ping2.htm或genie_ping3.htm页面,获取敏感信息,例如明文形式的网络密钥(密码)和2.4GHz & 5GHz无线网络名称(SSID)。
CVSS Information
N/A
Vulnerability Type
N/A