CVE-2012-6341

MediumCVSS 6.5/10Last modified Jun 16, 2026

Description

An Information Disclosure vulnerability exists in the my config file in NEtGEAR WGR614 v7 and v9, which could let a malicious user recover all previously used passwords on the device, for both the control panel and WEP/WPA/WPA2, in plaintext. This is a different issue than CVE-2012-6340.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://packetstormsecurity.com/files/date/2012-12-14/Third Party Advisory, VDB Entry
https://www.securityfocus.com/archive/1/525042Third Party Advisory, VDB Entry
https://packetstormsecurity.com/files/date/2012-12-14/Third Party Advisory, VDB Entry
https://www.securityfocus.com/archive/1/525042Third Party Advisory, VDB Entry

Timeline

Published: Feb 6, 2020
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-63426.8Cross-site request forgery (CSRF) vulnerability in logout.action in Atlassian Confluence 3.4.6 allows remote attackers to hijack the authent CVE-2012-63446.1Novell ZENworks Configuration Management before 11.2.4 allows XSS.CVE-2012-63457.5Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information.CVE-2012-63466.1Multiple cross-site scripting (XSS) vulnerabilities in FortiWeb before 4.4.4 allow remote attackers to inject arbitrary web script or HTML v CVE-2012-63476.1Multiple cross-site scripting (XSS) vulnerabilities in Java number format exception handling in FortiGate FortiDB before 4.4.2 allow remote CVE-2012-63483.3Centrify Deployment Manager 2.1.0.283, as distributed in Centrify Suite before 2012.5, allows local users to (1) overwrite arbitrary files v CVE-2012-63499.3Buffer overflow in the .mdb parser in Autonomy KeyView IDOL, as used in IBM Notes 8.5.x before 8.5.3 FP4, allows remote attackers to execute CVE-2012-63504.3Cross-site scripting (XSS) vulnerability in the Web component in IBM Cognos TM1 before 9.5.2 FP3 and 10.1 before 10.1 FP1 allows remote atta CVE-2012-63525.0The Session Manager in IBM Sterling Connect:Direct through 4.1.0.3 on UNIX allows remote attackers to cause a denial of service (daemon cras CVE-2012-63547.5The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication a CVE-2012-63556.5IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through CVE-2012-63566.5IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to