Vulnerability Details CVE-2013-3070
An Information Disclosure vulnerability exists in Netgear WNDR4700 running firmware 1.0.0.34 in the management web interface, which discloses the PSK of the wireless LAN.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- https://kb.netgear.com/24413/WNDR3700v4-Firmware-Version-1-0-1-52-Except-China-and-Russia-Only
- https://www.ise.io/casestudies/exploiting-soho-routers/
- https://www.ise.io/soho_service_hacks/
- https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf
- https://www.securityfocus.com/bid/59308
- https://kb.netgear.com/24413/WNDR3700v4-Firmware-Version-1-0-1-52-Except-China-and-Russia-Only
- https://www.ise.io/casestudies/exploiting-soho-routers/
- https://www.ise.io/soho_service_hacks/
- https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf
- https://www.securityfocus.com/bid/59308
Products affected by CVE-2013-3070
-
cpe:2.3:h:netgear:wndr4700:-
-
cpe:2.3:o:netgear:wndr4700_firmware:1.0.0.34