cnvd - cnvd-2016-04206

cnvd-2016-04206

Vulnerability from cnvd

Title: Netgear D6000和D3600硬编码的RSA密钥漏洞

Description:

Netgear D6000和D3600是美国网件的无线路由器产品。

Netgear D6000和D3600设备固件使用硬编码的RSA密钥，允许远程攻击者利用该漏洞用密钥进行中间人攻击，获取管理员访问权限，解密数据包。

Severity: 中

Patch Name: Netgear D6000和D3600硬编码的RSA密钥漏洞的补丁

Patch Description:

Netgear D6000和D3600是美国网件的无线路由器产品。

Netgear D6000和D3600设备固件使用硬编码的RSA密钥，允许远程攻击者利用该漏洞用密钥进行中间人攻击，获取管理员访问权限，解密数据包。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

用户可参考如下厂商提供的安全补丁以修复该漏洞： http://kb.netgear.com/app/answers/detail/a_id/30560

Reference: http://www.kb.cert.org/vuls/id/778696

Impacted products

Name
['Netgear D6000 <=1.0.0.49', 'Netgear D3600 1.0.0.49']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-8288"
    }
  },
  "description": "Netgear D6000\u548cD3600\u662f\u7f8e\u56fd\u7f51\u4ef6\u7684\u65e0\u7ebf\u8def\u7531\u5668\u4ea7\u54c1\u3002\r\n\r\nNetgear D6000\u548cD3600\u8bbe\u5907\u56fa\u4ef6\u4f7f\u7528\u786c\u7f16\u7801\u7684RSA\u5bc6\u94a5\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u5229\u7528\u8be5\u6f0f\u6d1e\u7528\u5bc6\u94a5\u8fdb\u884c\u4e2d\u95f4\u4eba\u653b\u51fb\uff0c\u83b7\u53d6\u7ba1\u7406\u5458\u8bbf\u95ee\u6743\u9650\uff0c\u89e3\u5bc6\u6570\u636e\u5305\u3002",
  "discovererName": "Mandar Jadhav of Qualys",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttp://kb.netgear.com/app/answers/detail/a_id/30560",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-04206",
  "openTime": "2016-06-22",
  "patchDescription": "Netgear D6000\u548cD3600\u662f\u7f8e\u56fd\u7f51\u4ef6\u7684\u65e0\u7ebf\u8def\u7531\u5668\u4ea7\u54c1\u3002\r\n\r\nNetgear D6000\u548cD3600\u8bbe\u5907\u56fa\u4ef6\u4f7f\u7528\u786c\u7f16\u7801\u7684RSA\u5bc6\u94a5\uff0c\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u5229\u7528\u8be5\u6f0f\u6d1e\u7528\u5bc6\u94a5\u8fdb\u884c\u4e2d\u95f4\u4eba\u653b\u51fb\uff0c\u83b7\u53d6\u7ba1\u7406\u5458\u8bbf\u95ee\u6743\u9650\uff0c\u89e3\u5bc6\u6570\u636e\u5305\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Netgear D6000\u548cD3600\u786c\u7f16\u7801\u7684RSA\u5bc6\u94a5\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Netgear D6000 \u003c=1.0.0.49",
      "Netgear D3600 1.0.0.49"
    ]
  },
  "referenceLink": "http://www.kb.cert.org/vuls/id/778696",
  "serverity": "\u4e2d",
  "submitTime": "2016-06-19",
  "title": "Netgear D6000\u548cD3600\u786c\u7f16\u7801\u7684RSA\u5bc6\u94a5\u6f0f\u6d1e"
}

CVE-2015-8288 (GCVE-0-2015-8288)

Vulnerability from cvelistv5

Published

2016-06-20 01:00

Modified

2024-08-06 08:13

Severity ?

CWE

Summary

NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

References

▼	URL	Tags
	http://www.kb.cert.org/vuls/id/778696	third-party-advisory, x_refsource_CERT-VN
	http://kb.netgear.com/app/answers/detail/a_id/30560	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T08:13:32.084Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "VU#778696",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/778696"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://kb.netgear.com/app/answers/detail/a_id/30560"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-06-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers\u0027 installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-06-20T01:57:01",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "name": "VU#778696",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/778696"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://kb.netgear.com/app/answers/detail/a_id/30560"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cert@cert.org",
          "ID": "CVE-2015-8288",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers\u0027 installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "VU#778696",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/778696"
            },
            {
              "name": "http://kb.netgear.com/app/answers/detail/a_id/30560",
              "refsource": "CONFIRM",
              "url": "http://kb.netgear.com/app/answers/detail/a_id/30560"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2015-8288",
    "datePublished": "2016-06-20T01:00:00",
    "dateReserved": "2015-11-19T00:00:00",
    "dateUpdated": "2024-08-06T08:13:32.084Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted