.. / CVE-2016-5649

• Info Disclosure
• Nuclei
• Web

Exploit for NETGEAR DGN2200 / DGND3700 - Admin Password Disclosure (CVE-2016-5649)

Description:

NETGEAR DGN2200 / DGND3700 is susceptible to a vulnerability within the page ‘BSW_cxttongr.htm’ which can allow a remote attacker to access this page without any authentication. The attacker can then use this password to gain administrator access of the targeted router’s web interface.

Nuclei Template

View the template here CVE-2016-5649.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2016/CVE-2016-5649.yaml

References: