{"action":"created","issue":{"url":"https://api.github.com/repos/ntadmin/DGND3700v2/issues/44","repository_url":"https://api.github.com/repos/ntadmin/DGND3700v2","labels_url":"https://api.github.com/repos/ntadmin/DGND3700v2/issues/44/labels{/name}","comments_url":"https://api.github.com/repos/ntadmin/DGND3700v2/issues/44/comments","events_url":"https://api.github.com/repos/ntadmin/DGND3700v2/issues/44/events","html_url":"https://github.com/ntadmin/DGND3700v2/issues/44","id":204642121,"number":44,"title":"Potential security issue","user":{"login":"ntadmin","id":8012540,"avatar_url":"https://avatars.githubusercontent.com/u/8012540?v=3","gravatar_id":"","url":"https://api.github.com/users/ntadmin","html_url":"https://github.com/ntadmin","followers_url":"https://api.github.com/users/ntadmin/followers","following_url":"https://api.github.com/users/ntadmin/following{/other_user}","gists_url":"https://api.github.com/users/ntadmin/gists{/gist_id}","starred_url":"https://api.github.com/users/ntadmin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ntadmin/subscriptions","organizations_url":"https://api.github.com/users/ntadmin/orgs","repos_url":"https://api.github.com/users/ntadmin/repos","events_url":"https://api.github.com/users/ntadmin/events{/privacy}","received_events_url":"https://api.github.com/users/ntadmin/received_events","type":"User","site_admin":false},"labels":[{"id":385439165,"url":"https://api.github.com/repos/ntadmin/DGND3700v2/labels/question","name":"question","color":"cc317c","default":true},{"id":530128867,"url":"https://api.github.com/repos/ntadmin/DGND3700v2/labels/Security","name":"Security","color":"5319e7","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2017-02-01T17:00:21Z","updated_at":"2017-02-01T17:04:24Z","closed_at":null,"body":"A vulnerability on netgear routers has been reported: http://www.silicon.co.uk/security/netgear-router-security-204061?utm_source=2017-02-01&utm_medium=email&utm_campaign=uk_silicon&referrer=nl_uk_silicon&t=6bce9a97f2c74e5b804011819ae023d11666671&pos=content-top_0_textContent\r\n\r\nNeed to verify that it is either not present, or resolve."},"comment":{"url":"https://api.github.com/repos/ntadmin/DGND3700v2/issues/comments/276716019","html_url":"https://github.com/ntadmin/DGND3700v2/issues/44#issuecomment-276716019","issue_url":"https://api.github.com/repos/ntadmin/DGND3700v2/issues/44","id":276716019,"user":{"login":"ntadmin","id":8012540,"avatar_url":"https://avatars.githubusercontent.com/u/8012540?v=3","gravatar_id":"","url":"https://api.github.com/users/ntadmin","html_url":"https://github.com/ntadmin","followers_url":"https://api.github.com/users/ntadmin/followers","following_url":"https://api.github.com/users/ntadmin/following{/other_user}","gists_url":"https://api.github.com/users/ntadmin/gists{/gist_id}","starred_url":"https://api.github.com/users/ntadmin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ntadmin/subscriptions","organizations_url":"https://api.github.com/users/ntadmin/orgs","repos_url":"https://api.github.com/users/ntadmin/repos","events_url":"https://api.github.com/users/ntadmin/events{/privacy}","received_events_url":"https://api.github.com/users/ntadmin/received_events","type":"User","site_admin":false},"created_at":"2017-02-01T17:04:24Z","updated_at":"2017-02-01T17:04:24Z","body":"The only .cgi files on the router are all in /www.eng, as follows:\r\n```\r\ngenie_restore_config.cgi  netgear-setup.cgi         page-server.cgi           securityquestions.cgi     setupwizard.cgi           upgrade_stringTbl.cgi\r\nhtpwd_recovery.cgi        nocache.cgi               restore_config.cgi        setup.cgi                 upgrade_flash.cgi\r\n\r\n```\r\nThis exploit relies on the presence of `unauth.cgi` or `passwordrecover.cgi` neither of which is present, so this is not an issue for this router."}}
{"actor":{"display_login":"ntadmin"}}