← back
CVE-2013-2751

CVE-2013-2751

EPSS 71.6%
Eval injection vulnerability in frontview/lib/np_handler.pl in the FrontView web interface in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to execute arbitrary Perl code via a crafted request, related to the "forgot password workflow."
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/123726/Netgear-ReadyNAS-Complete-System-Takeover.htmlunverifiedcve_referencewww.exploit-db.com/exploits/29815unverifiedexploitdbwww.exploit-db.com/exploits/29815unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/123726/Netgear-ReadyNAS-Complete-System-Takeover.htmlhttp://www.exploit-db.com/exploits/29815http://www.osvdb.org/98826http://www.readynas.com/?p=7002http://www.tripwire.com/register/security-advisory-netgear-readynas/http://www.tripwire.com/state-of-security/vulnerability-management/readynas-flaw-allows-root-access-unauthenticated-http-request/