NETGEAR WNR3500U Firmware vulnerabilities

3 CVEs affecting NETGEAR WNR3500U Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-3516, published 2019-11-13.

More from NETGEAR.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-4657, published 2019-11-13. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service.
• CVE-2013-3516, published 2019-11-13. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the CSRF tokens.
• CVE-2013-3517, published 2019-11-13. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in NETGEAR WNR3500U and WNR3500L.