PT-2019-6903 · NetGear · Netgear Wndr4700

Jacob Holcomb · Published 2019-11-14 · Updated 2019-11-18 · CVE-2013-3070

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netgear WNDR4700 version 1.0.0.34

Description An Information Disclosure issue exists in the management web interface, which discloses the Pre-Shared Key (PSK) of the wireless LAN.

Recommendations For Netgear WNDR4700 version 1.0.0.34, consider changing the PSK of the wireless LAN and restricting access to the management web interface until a fix is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-3070

Affected Products

Netgear Wndr4700

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2013-3070 · Security Note
• https://kb.netgear.com/24413/WNDR3700v4-Firmware-Version-1-0-1-52-Except-China-and-Russia-Only · Vendor Advisory
• https://securityfocus.com/bid/59308 · Note
• https://ise.io/casestudies/exploiting-soho-routers · Note
• https://ise.io/soho_service_hacks · Note
• https://ise.io/wp-content/uploads/2017/07/soho_techreport.pdf · Note