WF
Product
Wnr3500l Firmware
34
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 11Medium 19Low 0
Watch
Add Wnr3500l Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-45512 | 9.8 | Dec 26 | Certain NETGEAR devices are affected by weak cryptography Affected: before 1.2.0.62 |
| CVE-2021-38516 | 9.8 | Aug 11 | Certain NETGEAR devices are affected by lack of access control at the function level Affected: before 1.2.0.56 |
| CVE-2018-21162 | 9.8 | Apr 23 | Certain NETGEAR devices are affected by command injection by an unauthenticated attacker Affected: before 1.2.0.48 |
| CVE-2013-4657 | 9.8 | Nov 13 | Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service Affected: All versions, or not specified |
| CVE-2022-27643 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91 routers Affected: before 1.2.0.72 |
| CVE-2021-27239 | 8.8 | Mar 29 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers Affected: before 1.2.0.66 |
| CVE-2018-21093 | 8.8 | Apr 27 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.2.0.56 |
| CVE-2017-18743 | 8.8 | Apr 23 | Certain NETGEAR devices are affected by authentication bypass Affected: before 1.2.0.40 |
| CVE-2019-20753 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.2.0.50 |
| CVE-2019-20734 | 8.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker Affected: before 1.2.0.46 |
| CVE-2019-17372 | 8.1 | Oct 9 | Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi Affected: All versions, or not specified |
| CVE-2017-18777 | 7.8 | Apr 22 | Certain NETGEAR devices are affected by administrative password disclosure Affected: before 1.2.0.40 |
| CVE-2016-11059 | 7.5 | Apr 28 | Certain NETGEAR devices are affected by password exposure Affected: before 2017-01-06 |
| CVE-2018-21139 | 7.5 | Apr 23 | Certain NETGEAR devices are affected by disclosure of sensitive information Affected: before 1.2.0.54 |
| CVE-2018-21156 | 7.2 | Apr 27 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.2.0.46 |
| CVE-2021-45550 | 6.8 | Dec 26 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.2.0.62 |
| CVE-2019-20755 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user Affected: before 1.2.0.54 |
| CVE-2019-20754 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.2.0.54 |
| CVE-2019-20712 | 6.8 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.2.0.56 |
| CVE-2017-18788 | 6.7 | Apr 22 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.2.0.46 |
| CVE-2019-20737 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.2.0.54 |
| CVE-2019-20733 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.2.0.54 |
| CVE-2019-20732 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by command injection by an authenticated user Affected: before 1.2.0.48 |
| CVE-2019-20728 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a buffer overflow by an authenticated user Affected: before 1.2.0.48 |
| CVE-2019-20700 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.2.0.54 |
| CVE-2019-20692 | 6.7 | Apr 16 | Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker Affected: before 1.2.0.54 |
| CVE-2017-18765 | 6.5 | Apr 22 | Certain NETGEAR devices are affected by denial of service Affected: before 1.2.0.44 |
| CVE-2013-3516 | 6.5 | Nov 13 | NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the CSRF tokens Affected: 1.2.2.44_35.0.53na |
| CVE-2017-18700 | 6.1 | Apr 24 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.2.0.46 |
| CVE-2013-3517 | 5.4 | Nov 13 | Cross-site scripting (XSS) vulnerability in NETGEAR WNR3500U and WNR3500L Affected: All versions, or not specified |
| CVE-2021-38534 | 4.8 | Aug 11 | Certain NETGEAR devices are affected by stored XSS Affected: before 1.2.0.62 |
| CVE-2017-18785 | 4.8 | Apr 22 | Certain NETGEAR devices are affected by XSS Affected: before 1.2.0.46 |
| CVE-2017-18769 | 4.6 | Apr 22 | Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files Affected: before 1.2.0.44 |
| CVE-2019-20729 | 4.4 | Apr 16 | Certain NETGEAR devices are affected by incorrect configuration of security settings Affected: before 1.2.0.48 |
Showing 34