Netgear : Security Vulnerabilities, CVEs, Published In 2007
Cross-site scripting (XSS) vulnerability in cgi-bin/welcome (aka the login page) in Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 allows remote attackers to inject arbitrary web script or HTML via the err parameter in the context of an error page.
Max CVSS
4.3
EPSS Score
0.56%
Published
2007-10-18
Updated
2017-07-29
NETGEAR (formerly Infrant) ReadyNAS RAIDiator before 4.00b2-p2-T1 beta creates a default SSH root password derived from the hardware serial number, which makes it easier for remote attackers to guess the password and obtain login access.
Max CVSS
10.0
EPSS Score
2.25%
Published
2007-08-15
Updated
2018-10-15
2 vulnerabilities found