Netgear Wndr4700 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Netgear Wndr4700 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2013-3072 — CVSS 9.8 (critical): An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http://<router_ip>/apply.cgi?/hdd_usr_setup.h…
• CVE-2013-3071 — CVSS 9.8 (critical): NETGEAR Centria WNDR4700 devices with firmware 1.0.0.34 allow authentication bypass.
• CVE-2013-3073 — CVSS 9.8 (critical): A Symlink Traversal vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34.
• CVE-2016-10174 — CVSS 9.8 (critical) — actively exploited: The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html…
• CVE-2013-3070 — CVSS 7.5 (high): An Information Disclosure vulnerability exists in Netgear WNDR4700 running firmware 1.0.0.34 in the management web interface, which…
• CVE-2013-3074 — CVSS 7.5 (high): NetGear WNDR4700 Media Server devices with firmware 1.0.0.34 allow remote attackers to cause a denial of service (device crash).
• CVE-2013-3069 — CVSS 3.5 (low): Multiple cross-site scripting (XSS) vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject…