CVE-2016-1556

7.5HIGH

Key Information:

Vendor
Netgear
Status
Wnap320 Firmware
Vendor
CVE Published:
21 April 2017

Summary

Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0; and WND930 before 2.0.11 allows remote attackers to read the wireless WPS PIN or passphrase by visiting unauthenticated webpages.

References

https://kb.netgear.com/30481/CVE-2016-1556-Notification?c...
x_refsource_CONFIRM
http://packetstormsecurity.com/files/135956/D-Link-Netgea...
x_refsource_MISC
http://seclists.org/fulldisclosure/2016/Feb/112
mailing-listx_refsource_FULLDISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.