CVE-2013-3069

NETGEAR WNDR4700 1.0.0.34 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject arbitrary web script or HTML via the (1) UserName or (2) Password to the NAS User Setup page, (3) deviceName to USB_advanced.htm, or (4) Network Key to the Wireless Setup page.

Scores

EPSS 0.0016
EPSS Percentile 36.6%

Details

CWE
CWE-79
Status published
Products (3)
netgear/wndr4700_firmware
netgear/wndr4700
n/a/n/a
Published Apr 25, 2014
Tracked Since Feb 18, 2026