PT-2019-6916 · NetGear · Netgear Wnr3500L

Publicado 2019-11-13 · Atualizado 2019-11-15 · CVE-2013-3517

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions NETGEAR WNR3500U (affected versions not specified) NETGEAR WNR3500L (affected versions not specified)

Description A cross-site scripting (XSS) issue has been identified. This type of issue generally involves injecting malicious scripts into content from otherwise trusted websites, which can lead to unauthorized actions or access to sensitive data.

Recommendations For NETGEAR WNR3500U, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For NETGEAR WNR3500L, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-3517

Produtos afetados

Netgear Wnr3500L

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-3517 · Nota de Segurança
• https://ise.io/soho_service_hacks · Nota
• https://ise.io/casestudies/exploiting-soho-routers · Nota