Vulnerability Details CVE-2015-8289
The password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier allows remote attackers to discover the cleartext administrator password by reading the cgi-bin/passrec.asp HTML source code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 72.0%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 4.3
References
Products affected by CVE-2015-8289
-
cpe:2.3:h:netgear:d3600:-
-
cpe:2.3:h:netgear:d6000:-
-
cpe:2.3:o:netgear:d3600_firmware:1.0.0.49
-
cpe:2.3:o:netgear:d6000_firmware:-
-
cpe:2.3:o:netgear:d6000_firmware:1.0.0.49