Wnr3500u Firmware (Netgear) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2019-11-13. Vendor: Netgear.

CVEs of Wnr3500u Firmware

• CVE-2013-3516 - CVSS 6.5 (medium), 2019-11-13: NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the CSRF tokens.
• CVE-2013-3517 - CVSS 5.4 (medium), 2019-11-13: Cross-site scripting (XSS) vulnerability in NETGEAR WNR3500U and WNR3500L.
• CVE-2013-4657 - CVSS 9.8 (critical), 2019-11-13: Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service.