Medium severity · published Nov 13, 2019
CVE-2013-3516
NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the CSRF tokens
6.5
CVSS
0.7%
EPSS
No
On KEV
Description
NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the CSRF tokens.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WF
Wnr3500l Firmware · Netgear
1.2.2.44_35.0.53na · source: NVD
WF
Wnr3500u Firmware · Netgear
1.2.2.44_35.0.53na · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3516
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3516
Third Party Advisory
https://www.ise.io/casestudies/exploiting-soho-routers/
Exploit
https://www.ise.io/research/studies-and-papers/netgear_wnr3500/
Third Party Advisory
https://www.ise.io/soho_service_hacks/
More from Wnr3500l Firmware
9.8
CVE-2021-45512
Certain NETGEAR devices are affected by weak cryptography
9.8
CVE-2021-38516
Certain NETGEAR devices are affected by lack of access control at the function level
9.8
CVE-2018-21162
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker
9.8
CVE-2013-4657
Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service
8.8
CVE-2022-27643
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers