PT-2019-6916 · NetGear · Netgear Wnr3500L

Published 2019-11-13 · Updated 2019-11-15 · CVE-2013-3517

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions NETGEAR WNR3500U (affected versions not specified) NETGEAR WNR3500L (affected versions not specified)

Description A cross-site scripting (XSS) issue has been identified. This type of issue generally involves injecting malicious scripts into content from otherwise trusted websites, which can lead to unauthorized actions or access to sensitive data.

Recommendations For NETGEAR WNR3500U, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For NETGEAR WNR3500L, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-3517

Affected Products

Netgear Wnr3500L

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-3517 · Security Note
• https://ise.io/soho_service_hacks · Note
• https://ise.io/casestudies/exploiting-soho-routers · Note