CVE-2016-1557

Netgear WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0 reveal wireless passwords and administrative usernames and passwords over SNMP

published April 21, 2017

CVSS
—
EPSS
3%
Percentile
86.5
In the wild
Unconfirmed
What it is

⚠️ A little oversight can leak big secrets! The Netgear WNAP320, WNDAP350, and WNDAP360 before version 3.5.5.0 disclose wireless passwords and sensitive admin credentials over SNMP. 🔥 Think of it as a restaurant that accidentally leaves its menu open to the public, revealing the secret recipe ingredients right on the table. Anyone passing by can grab that juicy information without even asking! An attacker could easily nab your Wi-Fi credentials and admin passwords, turning them into a backstage pass for your network. This could lead to unauthorized access to your devices and sensitive data, which is absolutely devastating!

Put simply

Think of it as a restaurant that accidentally leaves its menu open to the public, revealing the secret recipe ingredients right on the table. Anyone passing by can grab that juicy information without even asking! This vulnerability arises from the SNMP service being misconfigured, allowing unauthorized users to query sensitive information such as wireless passwords and admin usernames/passwords. It's like a door left ajar, inviting anyone to take a peek inside.

What to do

An attacker could easily nab your Wi-Fi credentials and admin passwords, turning them into a backstage pass for your network. This could lead to unauthorized access to your devices and sensitive data, which is absolutely devastating! To protect yourself, upgrade to version 3.5.5.0 or later immediately. Additionally, review your SNMP configurations and consider disabling SNMP if it's not needed. Tightening access controls is also recommended! You've got this! Follow these steps and your network will be more secure in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02842 · 86.5th percentile
Published
2017-04-21T15:00Z
EPSS history
Timeline
  • 21 APR 15:00Z
    Netgear WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0 reveal wireless passwords and administrative usernames and passwords over SNMP
    cvelistv5