High severity7.5NVD Advisory· Published Jun 20, 2016· Updated May 6, 2026
CVE-2015-8289
CVE-2015-8289
Description
The password-recovery feature on NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier allows remote attackers to discover the cleartext administrator password by reading the cgi-bin/passrec.asp HTML source code.
Affected products
2- cpe:2.3:o:netgear:d3600_firmware:1.0.0.49:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- kb.netgear.com/app/answers/detail/a_id/30490nvdVendor Advisory
- www.kb.cert.org/vuls/id/778696nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.