NETGEAR WAX610 and WAX610Y Login Credential Logging Vulnerability

A vulnerability exists in NETGEAR WAX610 and WAX610Y access points, prior to version 10.8.11.4, where login credentials are unintentionally logged if a Syslog Server is configured. This issue allows users with access to the syslog server to read the logs containing these credentials.

Impact

Exposed login credentials in syslog logs, accessible to users with access to the syslog server.

Remediation

Users can update to NETGEAR WAX610 firmware version 11.8.0.10 or later, or WAX610Y firmware version 11.8.0.10 or later. Instructions for downloading the firmware are available on the NETGEAR Download Center.