CVE-2013-3516

NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the CSRF tokens.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2019-11-13

Last modified

2024-08-06

Weaknesses

CWE-352

Affected products

• Wnr3500l Firmware (Netgear)
• Wnr3500u Firmware (Netgear)

References

• https://www.ise.io/casestudies/exploiting-soho-routers/
• https://www.ise.io/research/studies-and-papers/netgear_wnr3500/
• https://www.ise.io/soho_service_hacks/