# Exploit Title: Password Disclosure vulnerability # Software: NETGEAR DGN2200 # Software Link: netgear.com # Version: DGN2200 # Author: Dolev Farhi, email: dolev(at)openflare(dot)org # Date: 23.7.2014 # Tested on: Kali Linux # Firmware 1.0.0.29_1.7.29_HotS 2. Vulnerability Description: =============================== An attacker is able to extract sensitive information such as the password from the Basic Settings router page due to storing it in plaintext. 3. Steps to reproduce: ====================== Navigate to the Basic Settings page, right click in the browser -> view source/frame html>

# Basic Settings
Does Your Internet Connection Require A Login?
Yes
No
Encapsulation |
Login |
Password |
Service Name (If Required) |
Idle Timeout (In Minutes) |
Internet IP Address
Get Dynamically From ISP
Use Static IP Address | . . .
Domain Name Server (DNS) Address
Get Automatically From ISP
Use These DNS Servers
Primary DNS | . . .
Secondary DNS | . . .
NAT (Network Address Translation)
| Enable Disable Bridge