Details of VAR-201310-0702

ID

VAR-201310-0702

TITLE

Netgear WNDR3700 Router 'cmd_ping6()' Remote Command Injection Vulnerability

Trust: 0.6

sources: CNVD: CNVD-2013-14126

DESCRIPTION

The Netgear WNDR3700 Router 'cmd_ping6()' function incorrectly filters user input, allowing an attacker to exploit a vulnerability to submit a specially crafted POST request to apply.cgi to execute arbitrary commands. Netgear WNDR3700 is a wireless router product from NetGear. A remote command injection vulnerability exists in the Netgear WNDR3700 router using version 4 firmware. An attacker could use this vulnerability to execute arbitrary commands in the context of an affected device with root privileges. Netgear WNDR3700 routers running firmware 4 are vulnerable

Trust: 1.35

sources: CNVD: CNVD-2013-14126 // CNNVD: CNNVD-201310-643 // BID: 63354

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2013-14126

AFFECTED PRODUCTS

vendor:	netgear	model:	wndr3700 router	scope:	eq	version:	1.0.1.32	Trust: 0.6
vendor:	netgear	model:	wndr3700 router	scope:	eq	version:	1.0.1.42	Trust: 0.6
vendor:	netgear	model:	wndr3700	scope:	eq	version:	4	Trust: 0.3

sources: CNVD: CNVD-2013-14126 // BID: 63354

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2013-14126
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2013-14126
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2013-14126

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201310-643

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201310-643

EXTERNAL IDS

db:	BID	id:	63354	Trust: 1.5
db:	CNVD	id:	CNVD-2013-14126	Trust: 0.6
db:	CNNVD	id:	CNNVD-201310-643	Trust: 0.6

sources: CNVD: CNVD-2013-14126 // BID: 63354 // CNNVD: CNNVD-201310-643

REFERENCES

url:	http://shadow-file.blogspot.com/2013/10/netgear-root-compromise-via-command.html	Trust: 0.9
url:	http://seclists.org/fulldisclosure/2013/oct/234	Trust: 0.6
url:	http://www.securityfocus.com/bid/63354	Trust: 0.6
url:	http://www.netgear.com	Trust: 0.3
url:	http://www.netgear.com/wndr3700#	Trust: 0.3

sources: CNVD: CNVD-2013-14126 // BID: 63354 // CNNVD: CNNVD-201310-643

CREDITS

Zachary Cutlip

Trust: 0.9

sources: BID: 63354 // CNNVD: CNNVD-201310-643

SOURCES

db:	CNVD	id:	CNVD-2013-14126
db:	BID	id:	63354
db:	CNNVD	id:	CNNVD-201310-643

LAST UPDATE DATE

2022-05-17T01:55:56.551000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2013-14126	date:	2013-10-30T00:00:00
db:	BID	id:	63354	date:	2013-10-24T00:00:00
db:	CNNVD	id:	CNNVD-201310-643	date:	2013-10-30T00:00:00

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2013-14126	date:	2013-10-30T00:00:00
db:	BID	id:	63354	date:	2013-10-24T00:00:00
db:	CNNVD	id:	CNNVD-201310-643	date:	2013-10-30T00:00:00