CVE-2014-2969
Last modified
CVE-2014-2969 is a vulnerability of currently unknown severity. NETGEAR GS108PE Prosafe Plus switches with firmware 1.2.0.5 have a hardcoded password of debugpassword for the ntgruser account, which allows remote attackers to upload firmware or read or modify memory contents, and consequently execute arbitrary code, via a request to (1) produce_burn.cgi, (2) register_debug.cgi, or (3) bootcode_update.cgi.. EPSS estimates a 1.51% chance of exploitation in the next 30 days.
Description
NETGEAR GS108PE Prosafe Plus switches with firmware 1.2.0.5 have a hardcoded password of debugpassword for the ntgruser account, which allows remote attackers to upload firmware or read or modify memory contents, and consequently execute arbitrary code, via a request to (1) produce_burn.cgi, (2) register_debug.cgi, or (3) bootcode_update.cgi.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Gs108pe Firmware | 1.2.0.5 |
| Netgear | Gs108pe | All versions |
References
- http://www.kb.cert.org/vuls/id/143740US Government Resource
- http://www.kb.cert.org/vuls/id/143740US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-2969?
How severe is CVE-2014-2969?
How do I fix CVE-2014-2969?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-2963Multiple cross-site scripting (XSS) vulnerabilities in group…
- CVE-2014-2964Cobham Aviator 700D and 700E satellite terminals have hardco…
- CVE-2014-2965Cross-site scripting (XSS) vulnerability in auth-settings-x.…
- CVE-2014-2966The ISO-8859-1 encoder in Resin Pro before 4.0.40 does not p…
- CVE-2014-2967Autodesk VRED Professional 2014 before SR1 SP8 allows remote…
- CVE-2014-2968Cross-site scripting (XSS) vulnerability in the web interfac…
- CVE-2014-2970Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2014-2971Cross-site scripting (XSS) vulnerability in AddStdLetter.jsp…
- CVE-2014-2972expand.c in Exim before 4.83 expands mathematical comparison…
- CVE-2014-2973Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2014-2974Cross-site request forgery (CSRF) vulnerability in php/user_…
- CVE-2014-2975Cross-site scripting (XSS) vulnerability in php/user_account…
Are you affected by CVE-2014-2969?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST