CVE-2013-3070

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

An Information Disclosure vulnerability exists in Netgear WNDR4700 running firmware 1.0.0.34 in the management web interface, which discloses the PSK of the wireless LAN.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://kb.netgear.com/24413/WNDR3700v4-Firmware-Version-1-0-1-52-Except-China-and-Russia-OnlyPatch, Vendor Advisory
https://www.ise.io/casestudies/exploiting-soho-routers/Third Party Advisory
https://www.ise.io/soho_service_hacks/Third Party Advisory
https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdfTechnical Description, Third Party Advisory
https://www.securityfocus.com/bid/59308Third Party Advisory, VDB Entry
https://kb.netgear.com/24413/WNDR3700v4-Firmware-Version-1-0-1-52-Except-China-and-Russia-OnlyPatch, Vendor Advisory
https://www.ise.io/casestudies/exploiting-soho-routers/Third Party Advisory
https://www.ise.io/soho_service_hacks/Third Party Advisory
https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdfTechnical Description, Third Party Advisory
https://www.securityfocus.com/bid/59308Third Party Advisory, VDB Entry

Timeline

Published: Nov 14, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-30719.8NETGEAR Centria WNDR4700 devices with firmware 1.0.0.34 allow authentication bypass.CVE-2013-30729.8An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http://<router_ip>/apply.cgi?/hdd_usr_setup.h CVE-2013-30739.8A Symlink Traversal vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34.CVE-2013-30747.5NetGear WNDR4700 Media Server devices with firmware 1.0.0.34 allow remote attackers to cause a denial of service (device crash).CVE-2013-307510.0Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubishi MX Component 3, as distributed in Citect CitectFacilities 7.10 and CitectScad CVE-2013-30764.9The crypto API in the Linux kernel through 3.9-rc8 does not initialize certain length variables, which allows local users to obtain sensitiv CVE-2013-30777.2Multiple integer overflows in the IP_MSFILTER and IPV6_MSFILTER features in (1) sys/netinet/in_mcast.c and (2) sys/netinet6/in6_mcast.c in t CVE-2013-30799.0VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to execute arbitrary programs with root privile CVE-2013-30809.0VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and con CVE-2013-30817.5SQL injection vulnerability in the checkEmailFormat function in plugins/jojo_core/classes/Jojo.php in Jojo before 1.2.2 allows remote attack CVE-2013-30824.3Cross-site scripting (XSS) vulnerability in plugins/jojo_core/forgot_password.php in Jojo before 1.2.2 allows remote attackers to inject arb CVE-2013-30836.8Cross-site request forgery (CSRF) vulnerability in cgi-bin/system_setting.exe in Belkin F5D8236-4 v2 allows remote attackers to hijack the a