|
Brought to you by:
Suppliers of:
|
|
|
| |
| Netgear WG102 offers the the typical SNMP write & SNMP read community password 'protection'. SNMPv2 is already known for weak security, yet NETGEAR goes one step further, the SNMP write community (password) is accessible in cleartext via the MIB which is readable via the SNMP read community. |
| |
Credit:
The information has been provided by Harm S.I. Vaittes.
The original article can be found at: http://www.milw0rm.com/exploits/7712
|
| |
Vulnerable Systems:
* Netgear WG102
Proof of Concept:
* Enable snmp (default) and set different SNMP write/read passwords.
* Then on a different machine do:
snmpwalk -c READPASSWORD -v2c IP SNMPv2-SMI::enterprises.4526.4.3
The passwords are stored in ...4526.4.3.8.4.0 and ...4526.4.3.8.5.0
|
|
|
|
|
