What is the CVSS score of CVE-2013-4775?

CVE-2013-4775 has a CVSS 2.0 base score of 7.8 (High). CVSS vector: AV:N/AC:L/Au:N/C:C/I:N/A:N. EPSS exploitation probability: 11.6%.

Is there a public PoC exploit available for CVE-2013-4775?

Yes, a public proof-of-concept exploit is available for CVE-2013-4775. Prioritise patching immediately. EPSS: 11.6%.

Prosafe Firmware CVE-2013-4775

HIGH

Information Exposure (CWE-200)

2013-12-19 cve@mitre.org

Information Disclosure Netgear Prosafe Firmware Prosafe Gs725Ts Prosafe Gs728Tps Prosafe Gs728Ts Prosafe Gs752Tps Prosafe Gs724T Prosafe S716T Prosafe Gs728Txs Prosafe Gs752Txs Prosafe Gs748T Prosafe Gs510Tp

7.8

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

7.8 HIGH

AV:N/AC:L/Au:N/C:C/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:C/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Confidentiality

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Dec 19, 2013 - 04:24 cve.org

HIGH 7.8

DescriptionCVE.org

NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, and GS725TS with firmware 5.3.0.17; and GS752TXS and GS728TXS with firmware 6.1.0.12 allows remote attackers to read encrypted administrator credentials and other startup configurations via a direct request to filesystem/startup-config.

AnalysisAI

NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, and GS725TS with firmware. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 11.6%.

Technical ContextAI

This vulnerability is classified as Exposure of Sensitive Information (CWE-200), which allows attackers to access sensitive data that should not be disclosed. NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, and GS725TS with firmware 5.3.0.17; and GS752TXS and GS728TXS with firmware 6.1.0.12 allows remote attackers to read encrypted administrator credentials and other startup configurations via a direct request to filesystem/startup-config. Affected products include: Netgear Prosafe Firmware, Netgear Prosafe Gs725Ts, Netgear Prosafe Gs728Tps, Netgear Prosafe Gs728Ts, Netgear Prosafe Gs752Tps.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Minimize information in error messages, implement proper access controls, encrypt sensitive data at rest and in transit.