medium6.5
CVE-2013-3516
NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the CSRF tokens.
Impact
NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the CSRF tokens.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Wnr3500u Firmware | Version 1.2.2.44_35.0.53na |
| Netgear | Wnr3500l Firmware | Version 1.2.2.44_35.0.53na |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.ise.io/casestudies/exploiting-soho-routers/
- https://www.ise.io/research/studies-and-papers/netgear_wnr3500/
- https://www.ise.io/soho_service_hacks/
- https://www.ise.io/casestudies/exploiting-soho-routers/
- https://www.ise.io/research/studies-and-papers/netgear_wnr3500/
- https://www.ise.io/soho_service_hacks/