CVE-2013-4776 – Netgear ProSafe - Denial of Service
https://notcve.org/view.php?id=CVE-2013-4776
NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier, GS748Tv4 5.4.1.14, and GS510TP 5.0.4.4 allows remote attackers to cause a denial of service (reboot or crash) via a crafted HTTP request to filesystem/. NETGEAR ProSafe GS724Tv3 y GS716Tv2 con firmware 5.4.1.13 y anteriores, GS748Tv4 5.4.1.14, y GS510TP 5.0.4.4 permite a atacantes remotos causar una denegación de servicio (reboot y crash) a través de una petición HTTP manipulada a filesystem/. • https://www.exploit-db.com/exploits/27775 http://www.encripto.no/forskning/whitepapers/Netgear_prosafe_advisory_aug_2013.pdf •
CVE-2013-4775 – Netgear ProSafe - Information Disclosure
https://notcve.org/view.php?id=CVE-2013-4775
NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, and GS725TS with firmware 5.3.0.17; and GS752TXS and GS728TXS with firmware 6.1.0.12 allows remote attackers to read encrypted administrator credentials and other startup configurations via a direct request to filesystem/startup-config. NETGEAR ProSafe GS724Tv3 y GS716Tv2 con firmware 5.4.1.13 y anteriores; GS748Tv4 con firmware 5.4.1.14; GS510TP con firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, y GS725TS con firmware 5.3.0.17; y GS752TXS y GS728TXS con firmware 6.1.0.12 permite a atacantes remotos leer credenciales de administrador cifradas y otras configuraciones de inicio a través de una petición directa a filesystem/startup-config. • https://www.exploit-db.com/exploits/27774 http://www.encripto.no/forskning/whitepapers/Netgear_prosafe_advisory_aug_2013.pdf • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •