CVE-2013-3067

MediumCVSS 5.4/10Last modified Jun 16, 2026

Description

Linksys WRT310Nv2 2.0.0.1 is vulnerable to XSS.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdfBroken Link
http://securityevaluators.com/knowledge/case_studies/routers/linksys_wrt310v2.phpThird Party Advisory
https://www.ise.io/research/studies-and-papers/linksys_wrt310v2/Exploit, Third Party Advisory
http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdfBroken Link
http://securityevaluators.com/knowledge/case_studies/routers/linksys_wrt310v2.phpThird Party Advisory
https://www.ise.io/research/studies-and-papers/linksys_wrt310v2/Exploit, Third Party Advisory

Timeline

Published: Feb 7, 2020
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-30686.8Cross-site request forgery (CSRF) vulnerability in apply.cgi in Linksys WRT310Nv2 2.0.0.1 allows remote attackers to hijack the authenticati CVE-2013-30693.5Multiple cross-site scripting (XSS) vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject ar CVE-2013-30707.5An Information Disclosure vulnerability exists in Netgear WNDR4700 running firmware 1.0.0.34 in the management web interface, which disclose CVE-2013-30719.8NETGEAR Centria WNDR4700 devices with firmware 1.0.0.34 allow authentication bypass.CVE-2013-30729.8An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http://<router_ip>/apply.cgi?/hdd_usr_setup.h CVE-2013-30739.8A Symlink Traversal vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34.CVE-2013-30747.5NetGear WNDR4700 Media Server devices with firmware 1.0.0.34 allow remote attackers to cause a denial of service (device crash).CVE-2013-307510.0Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilities 7.10 and CitectScad CVE-2013-30764.9The crypto API in the Linux kernel through 3.9-rc8 does not initialize certain length variables, which allows local users to obtain sensitiv CVE-2013-30777.2Multiple integer overflows in the IP_MSFILTER and IPV6_MSFILTER features in (1) sys/netinet/in_mcast.c and (2) sys/netinet6/in6_mcast.c in t CVE-2013-30799.0VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to execute arbitrary programs with root privile CVE-2013-30809.0VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and con