What’s Vulnerable › Vulnerabilities

CVE-2013-4775

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 15.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-12-19 · updated 2026-06-16
• Weakness: CWE-200

Description

NETGEAR ProSafe GS724Tv3 and GS716Tv2 with firmware 5.4.1.13 and earlier; GS748Tv4 with firmware 5.4.1.14; GS510TP with firmware 5.4.0.6; GS752TPS, GS728TPS, GS728TS, and GS725TS with firmware 5.3.0.17; and GS752TXS and GS728TXS with firmware 6.1.0.12 allows remote attackers to read encrypted administrator credentials and other startup configurations via a direct request to filesystem/startup-config.

Affected products

• NETGEAR Prosafe Firmware: through 5.4.1.13; through 5.4.1.14; 5.3.0.17, 5.0.4.4, 5.4.0.6, 5.4.1.10, 6.1.0.12, 5.4.1.13
• NETGEAR Prosafe Gs510Tp: all versions
• NETGEAR Prosafe Gs724T: v3
• NETGEAR Prosafe Gs725Ts: all versions
• NETGEAR Prosafe Gs728Tps: all versions
• NETGEAR Prosafe Gs728Ts: all versions
• NETGEAR Prosafe Gs728Txs: all versions
• NETGEAR Prosafe Gs748T: v4
• NETGEAR Prosafe Gs752Tps: all versions
• NETGEAR Prosafe Gs752Txs: all versions
• NETGEAR Prosafe S716T: v2

References

• http://www.encripto.no/forskning/whitepapers/Netgear_prosafe_advisory_aug_2013.pdf
• http://www.encripto.no/forskning/whitepapers/Netgear_prosafe_advisory_aug_2013.pdf

Get alerted when CVE-2013-4775 or the next vulnerability affects your stack