CVE-2016-5649

A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a remote attacker to access this page without any authentication. When processed, it exposes the admin password in clear text before it gets redirected to absw_vfysucc.cgia. An attacker can use this password to gain administrator access to the targeted router's web interface.

• CWE-319
• CWE-200

• http://packetstormsecurity.com/files/152675/Netgear-DGN2200-DGND3700-Admin-Password-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/140342/Netgear-DGN2200-DGND3700-WNDR4500-Information-Disclosure.htmlThird Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/152675/Netgear-DGN2200-DGND3700-Admin-Password-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
• https://packetstormsecurity.com/files/140342/Netgear-DGN2200-DGND3700-WNDR4500-Information-Disclosure.htmlThird Party Advisory, VDB Entry

Published

Jul 24, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-5640Directory traversal vulnerability in cgi-bin/rftest.cgi on C…
• CVE-2016-5642Opmantek NMIS before 8.5.12G has XSS via SNMP.
• CVE-2016-5645Rockwell Automation MicroLogix 1400 PLC 1766-L32BWA, 1766-L3…7.3
• CVE-2016-5646An exploitable heap overflow vulnerability exists in the Com…
• CVE-2016-5647The igdkmd64 module in the Intel Graphics Driver through 15.…
• CVE-2016-5648Acer Portal app before 3.9.4.2000 for Android does not prope…
• CVE-2016-5650ZModo ZP-NE14-S and ZP-IBH-13W devices do not enforce a WPA2…
• CVE-2016-5652An exploitable heap-based buffer overflow exists in the hand…
• CVE-2016-5653Multiple SQL injection vulnerabilities in Misys FusionCapita…
• CVE-2016-5654Misys FusionCapital Opics Plus allows remote authenticated u…
• CVE-2016-5655Misys FusionCapital Opics Plus does not verify X.509 certifi…
• CVE-2016-5660Cross-site scripting (XSS) vulnerability in AttachmentsList.…6.1