CoreCVE
Back

LOW

Multiple cross-site scripting (XSS) vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject arbitrary web script or HTML via the (1) UserName or (2) Password to the NAS User Setup page, (3) deviceName to USB_advanced.htm, or (4) Network Key to the Wireless Setup page

Published Apr 25, 2014

Description

Multiple cross-site scripting (XSS) vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject arbitrary web script or HTML via the (1) UserName or (2) Password to the NAS User Setup page, (3) deviceName to USB_advanced.htm, or (4) Network Key to the Wireless Setup page.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Apr 25, 2014
Updated Aug 6, 2024
Reserved Apr 15, 2013
Link CVE-2013-3069

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 16, 2026
Link CVE-2013-3069

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Apr 25, 2014
Updated Aug 6, 2024
Link EUVD-2013-3007

GitHub

No data