Netgear

Wndr4700 Firmware

7 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2013-3071

  • EPSS 1.24%
  • Published 28.01.2020 21:15:11
  • Last modified 21.11.2024 01:52:56

NETGEAR Centria WNDR4700 devices with firmware 1.0.0.34 allow authentication bypass.

7.8

CVE-2013-3074

  • EPSS 0.52%
  • Published 28.01.2020 21:15:11
  • Last modified 21.11.2024 01:52:57

NetGear WNDR4700 Media Server devices with firmware 1.0.0.34 allow remote attackers to cause a denial of service (device crash).

7.5

CVE-2013-3070

  • EPSS 2.03%
  • Published 14.11.2019 19:15:11
  • Last modified 21.11.2024 01:52:56

An Information Disclosure vulnerability exists in Netgear WNDR4700 running firmware 1.0.0.34 in the management web interface, which discloses the PSK of the wireless LAN.

9.8

CVE-2013-3072

Exploit
  • EPSS 1.58%
  • Published 14.11.2019 19:15:11
  • Last modified 21.11.2024 01:52:56

An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http://<router_ip>/apply.cgi?/hdd_usr_setup.htm that when visited by any user, authenticated or not, causes the router to no longer require a password to a...

10

CVE-2013-3073

  • EPSS 6.69%
  • Published 14.11.2019 18:15:11
  • Last modified 21.11.2024 01:52:56

A Symlink Traversal vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34.

10

CVE-2016-10174

Warning Exploit
  • EPSS 91.84%
  • Published 30.01.2017 04:59:00
  • Last modified 20.04.2025 01:37:25

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution.

3.5

CVE-2013-3069

Exploit
  • EPSS 0.16%
  • Published 25.04.2014 17:12:03
  • Last modified 12.04.2025 10:46:40

Multiple cross-site scripting (XSS) vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject arbitrary web script or HTML via the (1) UserName or (2) Password to the NAS User Setup page, (3) deviceName to ...