ID CVE-2013-4776
Summary NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier, GS748Tv4 5.4.1.14, and GS510TP 5.0.4.4 allows remote attackers to cause a denial of service (reboot or crash) via a crafted HTTP request to filesystem/.
References
Vulnerable Configurations
  • cpe:2.3:o:netgear:prosafe_firmware:5.4.1.14:*:*:*:*:*:*:*
    cpe:2.3:o:netgear:prosafe_firmware:5.4.1.14:*:*:*:*:*:*:*
  • cpe:2.3:h:netgear:prosafe_gs748t:v4:*:*:*:*:*:*:*
    cpe:2.3:h:netgear:prosafe_gs748t:v4:*:*:*:*:*:*:*
  • cpe:2.3:o:netgear:prosafe_firmware:5.0.4.4:*:*:*:*:*:*:*
    cpe:2.3:o:netgear:prosafe_firmware:5.0.4.4:*:*:*:*:*:*:*
  • cpe:2.3:h:netgear:prosafe_gs510tp:-:*:*:*:*:*:*:*
    cpe:2.3:h:netgear:prosafe_gs510tp:-:*:*:*:*:*:*:*
  • cpe:2.3:o:netgear:prosafe_firmware:5.3.0.17:*:*:*:*:*:*:*
    cpe:2.3:o:netgear:prosafe_firmware:5.3.0.17:*:*:*:*:*:*:*
  • cpe:2.3:o:netgear:prosafe_firmware:5.4.0.6:*:*:*:*:*:*:*
    cpe:2.3:o:netgear:prosafe_firmware:5.4.0.6:*:*:*:*:*:*:*
  • cpe:2.3:o:netgear:prosafe_firmware:5.4.1.10:*:*:*:*:*:*:*
    cpe:2.3:o:netgear:prosafe_firmware:5.4.1.10:*:*:*:*:*:*:*
  • cpe:2.3:o:netgear:prosafe_firmware:5.4.1.13:*:*:*:*:*:*:*
    cpe:2.3:o:netgear:prosafe_firmware:5.4.1.13:*:*:*:*:*:*:*
  • cpe:2.3:h:netgear:prosafe_gs724t:v3:*:*:*:*:*:*:*
    cpe:2.3:h:netgear:prosafe_gs724t:v3:*:*:*:*:*:*:*
  • cpe:2.3:h:netgear:prosafe_s716t:v2:*:*:*:*:*:*:*
    cpe:2.3:h:netgear:prosafe_s716t:v2:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 19-12-2013 - 18:07)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
misc http://www.encripto.no/forskning/whitepapers/Netgear_prosafe_advisory_aug_2013.pdf
Last major update 19-12-2013 - 18:07
Published 19-12-2013 - 04:24
Last modified 19-12-2013 - 18:07
Back to Top