NETGEAR WNR1000 'Image' Request Authentication Bypass Vulnerability

  1. Network Vulnerabilities
  2. Privilege escalation
  3. NETGEAR WNR1000 'Image' Request Authentication Bypass Vulnerability
Summary
This host is running with NETGEAR WNR1000 and prone to authentication bypass vulnerability.
Impact
Successful exploitation will allow attackers to gain administrative access, circumventing existing authentication mechanisms. Impact Level: Application
Solution
Upgrade to NETGEAR with firmware version 1.0.2.60 or later, For updates refer to http://www.netgear.com
Insight
The web server skipping authentication for certain requests that contain a '.jpg' substring. With a specially crafted URL, a remote attacker can bypass authentication and gain access to the device configuration.
Affected
NETGEAR WNR1000v3, firmware version prior to 1.0.2.60
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities