Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2017-5521

An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. They are prone to password disclosure via simple crafted requests to the web management server. The bug is exploitable remotely if the remote management option is set, and can also be exploited given access to the router over LAN or WLAN. When trying to access the web panel, a user is asked to authenticate; if the authentication is canceled and password recovery is not enabled, the user is redirected to a page that exposes a password recovery token. If a user supplies the correct token to the page /passwordrecovered.cgi?id=TOKEN (and password recovery is not enabled), they will receive the admin password for the router. If password recovery is set the exploit will fail, as it will ask the user for the recovery questions that were previously set when enabling that feature. This is persistent (even after disabling the recovery option, the exploit will fail) because the router will ask for the security questions.

CVSS 8.1 · HighBuzz score 52.4KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 52.4

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 17.9 · diversity 9.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
17.9
5 evidence mentions in the snapshot
Diversity score
9.5
4 sources across 1 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
5 source links · newest first
  • Some models of Comba and D-Link WiFi routers leak admin credentialsSecurity Affairs

    Security experts have discovered that some models of D-Link and Comba WiFi routers leak their administrative login credentials in plaintext. Security researchers from Trustwave’s SpiderLabs have discovered several credential leaking vulnerabilities in some models of D-Link and Comba Telecom. The researcher Simon Kenin from SpiderLabs discovered five credential leaking vulnerabilities, three of them affect some […]

    newssecurityaffairs.comSep 11, 2019, 7:01 AM
  • Can your Netgear router be hijacked? Check now!Help Net Security

    Yesterday, researcher Simon Kenin of Trustwave SpiderLabs released information about an authentication bypass flaw affecting a wide variety of Netgear routers, as well as PoC attack code for triggering it. The vulnerability (CVE-2017-5521) can be exploited by attackers to discover the password required to take over control of an affected device. “The bug is exploitable remotely if the remote management option is set and can also be exploited given access to the router over LAN … More →

    newswww.helpnetsecurity.comJan 31, 2017, 4:42 PM
  • Hundreds of thousands, if not over a million Netgear routers open to hackSecurity Affairs

    Hundreds of thousands of Netgear routers are vulnerable to password bypass, the company issued updates only for a number models. An impressive number of Netgear routers is affected by two flaws that can lead to password disclosure. It has been estimated that hundreds of thousand devices, potentially more than one million Netgear routers, could be hacked, by both a […]

    newssecurityaffairs.comJan 31, 2017, 8:22 AM
  • Many NETGEAR Routers Leak Admin PasswordsSecurityWeek

    NETGEAR has released firmware updates for many of its routers after an expert discovered that they are affected by serious vulnerabilities that can be exploited to obtain the administrator password for the user interface.

    newswww.securityweek.comJan 30, 2017, 3:57 PM
  • Dozens of Netgear products vulnerable to authentication bypass flawsCSO Online

    Simon Kenin, a security researcher at Trustwave, was – by his own admission – being lazy the day he discovered an authentication vulnerability in his Netgear router. Instead of getting up out of bed to address a connection problem, he started fuzzing the web interface and discovered a serious issue. Kenin had hit upon unauth.cgi, code […]

    newswww.csoonline.comJan 30, 2017, 3:00 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence