PT-2019-6905 · NetGear · Netgear Centria Wndr4700

Jacob Holcomb · Publicado 2019-11-14 · Atualizado 2019-11-20 · CVE-2013-3073

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NETGEAR Centria WNDR4700 Firmware version 1.0.0.34

Description A Symlink Traversal issue exists.

Recommendations For NETGEAR Centria WNDR4700 Firmware version 1.0.0.34, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2013-3073

Produtos afetados

Netgear Centria Wndr4700

Referências · 7

• https://ise.io/casestudies/exploiting-soho-routers · Nota
• https://ise.io/soho_service_hacks · Nota
• https://vuldb.com/?id.8471 · Nota
• https://ise.io/wp-content/uploads/2017/07/soho_techreport.pdf · Nota
• https://securityfocus.com/bid/59307 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-3073 · Nota de Segurança
• https://kb.netgear.com/24413/WNDR3700v4-Firmware-Version-1-0-1-52-Except-China-and-Russia-Only · Aviso do Fabricante