Login Request a demo
High severity · published Oct 9, 2019
CVE-2019-17372
Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi
8.1
CVSS
1.7%
EPSS
No
On KEV
Description
Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNU_accessPassword_recovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D, R4500, R6200, R6200V2, R6250, R6300, R6300v2, R6400, R6700, R6900P, R6900, R7000P, R7000, R7100LG, R7300, R7900, R8000, R8300, R8500, WGR614v10, WN2500RPv2, WNDR3400v2, WNDR3700v3, WNDR4000, WNDR4500, WNDR4500v2, WNR1000, WNR1000v3, WNR3500L, and WNR3500L.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Ac1450 Firmware · Netgear
All versions, or not specified · source: NVD
DF
D8500 Firmware · Netgear
All versions, or not specified · source: NVD
DF
Dc112a Firmware · Netgear
All versions, or not specified · source: NVD
JF
Jndr3000 Firmware · Netgear
All versions, or not specified · source: NVD
LF
Lg2200d Firmware · Netgear
All versions, or not specified · source: NVD
RF
R4500 Firmware · Netgear
All versions, or not specified · source: NVD
RF
R6200 Firmware · Netgear
All versions, or not specified · source: NVD
RF
R6200v2 Firmware · Netgear
All versions, or not specified · source: NVD
RF
R6250 Firmware · Netgear
All versions, or not specified · source: NVD
RF
R6300 Firmware · Netgear
All versions, or not specified · source: NVD
RF
R6300v2 Firmware · Netgear
All versions, or not specified · source: NVD
RF
R6400 Firmware · Netgear
All versions, or not specified · source: NVD
Affected product
AF
Ac1450 Firmware
Netgear
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-17372
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-17372
Exploit
https://github.com/zer0yu/CVE_Request/blob/master/netgear/netgear_cgi_unauthorized_access_vulnerability.md
More from Ac1450 Firmware
8.1
CVE-2017-5521
NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
8.8
CVE-2017-18848
Certain NETGEAR devices are affected by CSRF
7.5
CVE-2016-11059
Certain NETGEAR devices are affected by password exposure