PT-2019-6905 · NetGear · Netgear Centria Wndr4700

Jacob Holcomb · Published 2019-11-14 · Updated 2019-11-20 · CVE-2013-3073

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NETGEAR Centria WNDR4700 Firmware version 1.0.0.34

Description A Symlink Traversal issue exists.

Recommendations For NETGEAR Centria WNDR4700 Firmware version 1.0.0.34, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2013-3073

Affected Products

Netgear Centria Wndr4700

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2013-3073 · Security Note
• https://kb.netgear.com/24413/WNDR3700v4-Firmware-Version-1-0-1-52-Except-China-and-Russia-Only · Vendor Advisory
• https://ise.io/casestudies/exploiting-soho-routers · Note
• https://ise.io/soho_service_hacks · Note
• https://vuldb.com/?id.8471 · Note
• https://ise.io/wp-content/uploads/2017/07/soho_techreport.pdf · Note
• https://securityfocus.com/bid/59307 · Note