CVE-2019-13393

EUVD-2019-4887
The Voo branded NETGEAR CG3700b custom firmware V2.02.03 uses the same default 8 character passphrase for the administrative console and the WPA2 pre-shared key. Either an attack against HTTP Basic Authentication or an attack against WPA2 could be used to determine this passphrase.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 61%
Affected Products (NVD)
VendorProductVersion
netgearcg3700b_firmware
2.02.03
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.doyler.net/security-not-included/voo-netgear-cg3700b-vulnerabilities
https://www.doyler.net/security-not-included/voo-netgear-cg3700b-vulnerabilities