CVE-2013-3516: NETGEAR WNR3500L Firmware

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the CSRF tokens.

Affected products

• NETGEAR WNR3500L Firmware: version 1.2.2.44_35.0.53na only
• NETGEAR WNR3500U Firmware: version 1.2.2.44_35.0.53na only

Published 2019-11-13. Last modified 2026-06-16.