CVE-2012-6340

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

An Authentication vulnerability exists in NETGEAR WGR614 v7 and v9 due to a hardcoded credential used for serial programming, a related issue to CVE-2006-1002.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://packetstormsecurity.com/files/118854/Netgear-WGR614-Credential-Information.htmlThird Party Advisory, VDB Entry
https://vuldb.com/?id.7180Permissions Required
https://www.securityfocus.com/archive/1/525042Third Party Advisory, VDB Entry
https://packetstormsecurity.com/files/118854/Netgear-WGR614-Credential-Information.htmlThird Party Advisory, VDB Entry
https://vuldb.com/?id.7180Permissions Required
https://www.securityfocus.com/archive/1/525042Third Party Advisory, VDB Entry

Timeline

Published: Feb 6, 2020
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-63416.5An Information Disclosure vulnerability exists in the my config file in NEtGEAR WGR614 v7 and v9, which could let a malicious user recover a CVE-2012-63426.8Cross-site request forgery (CSRF) vulnerability in logout.action in Atlassian Confluence 3.4.6 allows remote attackers to hijack the authent CVE-2012-63446.1Novell ZENworks Configuration Management before 11.2.4 allows XSS.CVE-2012-63457.5Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information.CVE-2012-63466.1Multiple cross-site scripting (XSS) vulnerabilities in FortiWeb before 4.4.4 allow remote attackers to inject arbitrary web script or HTML v CVE-2012-63476.1Multiple cross-site scripting (XSS) vulnerabilities in Java number format exception handling in FortiGate FortiDB before 4.4.2 allow remote CVE-2012-63483.3Centrify Deployment Manager 2.1.0.283, as distributed in Centrify Suite before 2012.5, allows local users to (1) overwrite arbitrary files v CVE-2012-63499.3Buffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x before 8.5.3 FP4, allows remote attackers to execute CVE-2012-63504.3Cross-site scripting (XSS) vulnerability in the Web component in IBM Cognos TM1 before 9.5.2 FP3 and 10.1 before 10.1 FP1 allows remote atta CVE-2012-63525.0The Session Manager in IBM Sterling Connect:Direct through 4.1.0.3 on UNIX allows remote attackers to cause a denial of service (daemon cras CVE-2012-63547.5The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication a CVE-2012-63556.5IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through