CVE-2015-8288

Published: Jun 20, 2016Modified: May 6, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

NETGEAR D3600 devices with firmware 1.0.0.49 and D6000 devices with firmware 1.0.0.49 and earlier use the same hardcoded private key across different customers' installations, which allows remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Affected (2)

Products: Netgear: D3600 Firmware, D6000 Firmware

2 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear D3600 Firmware	Version 1.0.0.49

Running on/with	Platform Versions
Netgear D3600	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear D6000 Firmware	Up to 1.0.0.49

Running on/with	Platform Versions
Netgear D6000	All versions

References (4)

http://kb.netgear.com/app/answers/detail/a_id/30560

Source: cret@cert.org

Vendor Advisory

http://www.kb.cert.org/vuls/id/778696

Source: cret@cert.org

Third Party AdvisoryUS Government Resource

http://kb.netgear.com/app/answers/detail/a_id/30560

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.kb.cert.org/vuls/id/778696

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.