Netgear WNR1000v3 suffers from a password recovery credential disclosure vulnerability.
fd3330fd142b3b449f6632005ba44c89faaee27e562f16b553e16bed506c7e7b
Netgear WNR1000v3 routers suffer from a flaw in the password recovery flow that allows for disclosure of the plaintext router credentials. The flaw was reported to Netgear in April of 2013 and the vendor has yet to issue a patch. Included is a proof of concept exploit.
10ceab3cf4e7cbcfbcc0663fea13a84947509762cb859ef415f65fff661f9866