full-disclosure - [FD] SSD Advisory – Netgear ReadyNAS Surveillance Unauthenticated Remote Command Execution

Open Source and information security mailing list archives

Message-ID: <CAAnZqX_ftdzOd9L+fQ6a8Y==fuaHXe9Hc++FavR1J_5QP69JUA@mail.gmail.com>
Date: Tue, 3 Oct 2017 08:28:03 +0300
From: Maor Shwartz <maors@...ondsecurity.com>
To: fulldisclosure@...lists.org
Cc: SecuriTeam Secure Disclosure <ssd@...ondsecurity.com>
Subject: [FD] SSD Advisory – Netgear ReadyNAS Surveillance Unauthenticated Remote Command Execution

SSD Advisory – Netgear ReadyNAS Surveillance Unauthenticated Remote Command
Execution

Full report: https://blogs.securiteam.com/index.php/archives/3409
Twitter: @SecuriTeam_SSD
Weibo: SecuriTeam_SSD

Vulnerability summary
The following advisory describes an Unauthenticated Remote Command
Execution vulnerability found in Netgear ReadyNAS Surveillance.

Netgear ReadyNAS Surveillance – Small businesses and corporate branch
offices require a secure way to protect physical assets, but often lack the
security expertise or big budget that most solutions require. With these
challenges in mind, NETGEAR introduces ReadyNAS Surveillance, easy-to-use
network video recording (NVR) software that installs directly to a ReadyNAS
storage device. Add a set of cameras to a Power over Ethernet ProSafe
switch and your surveillance network is up and running in no time.

Credit
An independent security researcher, Kacper Szurek, has reported this
vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program

Vendor response
Netgear was informed of the vulnerability on June 27, but while
acknowledging the receipt of the vulnerability information, refused to
respond to the technical claims, to give a fix timeline or coordinate an
advisory.

--
Thanks
Maor Shwartz
Beyond Security
GPG Key ID: 93CC36E2DE7FF514

Download attachment "SSD Advisory – Netgear ReadyNAS Surveillance Unauthenticated Remote Command Execution – SecuriTeam Blogs.pdf" of type "application/pdf" (115540 bytes)

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives