Test ID:	1.3.6.1.4.1.25623.1.0.105223
Category:	Web application abuses
Title:	NetGear WNDR Authentication Bypass / Information Disclosure
Summary:	A number of NetGear WNDR devices contain an embedded SOAP service that; is seemingly for use with the NetGear Genie application. This service allows for viewing and setting of certain; router parameters. This SOAP service is prone to an authentication bypass.
Description:	Summary: A number of NetGear WNDR devices contain an embedded SOAP service that is seemingly for use with the NetGear Genie application. This service allows for viewing and setting of certain router parameters. This SOAP service is prone to an authentication bypass. Vulnerability Impact: Affected devices can be interrogated and hijacked Affected Software/OS: Platforms / Firmware confirmed affected: NetGear WNDR3700v4 - V1.0.0.4SH NetGear WNDR3700v4 - V1.0.1.52 NetGear WNR2200 - V1.0.1.88 NetGear WNR2500 - V1.0.0.24 Additional platforms believed to be affected: NetGear WNDR3800 NetGear WNDRMAC NetGear WPN824N NetGear WNDR4700 Solution: Ask the vendor for an update. Ensure remote WAN management is disabled on the affected devices. Only allow trusted devices access to the local network. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.