Description
Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server.
Recommended action
Apply updates per vendor instructions. If the affected device has since entered end-of-life, it should be disconnected if still in use.
CISA remediation due date for U.S. federal agencies: 29 Sep 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.