cve/2015/CVE-2015-8288.md

18 lines
772 B
Markdown
Raw Normal View History

2024-05-26 14:27:05 +02:00
### [CVE-2015-8288](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8288)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.
### POC
#### Reference
- http://www.kb.cert.org/vuls/id/778696
#### Github
No PoCs found on GitHub currently.