{
  "affected_products": {
    "_id": null,
    "data": [
      {
        "_id": null,
        "model": "ac1200",
        "scope": null,
        "trust": 0.7,
        "vendor": "netgear",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-19-1014"
      }
    ]
  },
  "credits": {
    "_id": null,
    "data": "Michael Flanders of Trend Micro Zero Day Initiative",
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-19-1014"
      }
    ],
    "trust": 0.7
  },
  "cvss": {
    "_id": null,
    "data": [
      {
        "cvssV2": [],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT",
            "author": "ZDI",
            "availabilityImpact": "NONE",
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.1,
            "id": "ZDI-19-1014",
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 0.7,
            "userInteraction": "REQUIRED",
            "vectorString": "AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "ZDI",
            "id": "ZDI-19-1014",
            "trust": 0.7,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-19-1014"
      }
    ]
  },
  "description": {
    "_id": null,
    "data": "This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR AC1200 Smart WiFi Router. User interaction is required to exploit this vulnerability.The specific flaw exists within the handling of admin credentials provided to the mini_httpd endpoint. The issue results from displaying sensitive information in plaintext. An attacker can leverage this vulnerability to disclose sensitive information in the context of the administrator.",
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-19-1014"
      }
    ],
    "trust": 0.7
  },
  "external_ids": {
    "_id": null,
    "data": [
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-8671",
        "trust": 0.7
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-1014",
        "trust": 0.7
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-19-1014"
      }
    ]
  },
  "id": "VAR-201912-2033",
  "iot": {
    "_id": null,
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 0.36666667
  },
  "last_update_date": "2022-05-17T02:02:22.506000Z",
  "sources": {
    "_id": null,
    "data": [
      {
        "db": "ZDI",
        "id": "ZDI-19-1014",
        "ident": null
      }
    ]
  },
  "sources_release_date": {
    "_id": null,
    "data": [
      {
        "date": "2019-12-12T00:00:00",
        "db": "ZDI",
        "id": "ZDI-19-1014",
        "ident": null
      }
    ]
  },
  "sources_update_date": {
    "_id": null,
    "data": [
      {
        "date": "2019-12-12T00:00:00",
        "db": "ZDI",
        "id": "ZDI-19-1014",
        "ident": null
      }
    ]
  },
  "title": {
    "_id": null,
    "data": "(0Day) NETGEAR AC1200 mini_httpd Cleartext Transmission of Sensitive Information Information Disclosure Vulnerability",
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-19-1014"
      }
    ],
    "trust": 0.7
  }
}