Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-3035 State: PUBLISHED Published: 2013-06-21T14:00:00 Last Updated: 2024-08-06T16:00:08.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv6 implementation in the inet subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allows remote attackers to cause a denial of service (system hang) via a crafted packet to an IPv6 interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=isg1IV42124 - http://www.ibm.com/support/docview.wss?uid=isg1IV42229 - http://www.ibm.com/support/docview.wss?uid=isg1IV42095 - http://www.ibm.com/support/docview.wss?uid=isg1IV42264 - http://www.ibm.com/support/do
ort/docview.wss?uid=isg1IV42095 - http://www.ibm.com/support/docview.wss?uid=isg1IV42264 - http://www.ibm.com/support/docview.wss?uid=isg1IV37925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84657 - http://www.ibm.com/support/docview.wss?uid=isg1IV42072 - http://aix.software.ibm.com/aix/efixes/security/inet_advisory.asc - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19253
CVE ID: CVE-2013-3036 State: PUBLISHED Published: 2013-09-12T01:00:00 Last Updated: 2024-08-06T16:00:08.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in IBM Rational Requirements Composer before 4.0.4 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84688 - http://www-01.ibm.com/support/docview.wss?uid=swg21645927
CVE ID: CVE-2013-3037 State: PUBLISHED Published: 2013-09-12T01:00:00 Last Updated: 2024-08-06T16:00:09.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for local users to gain privileges via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21645927 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84689
CVE ID: CVE-2013-3038 State: PUBLISHED Published: 2013-09-12T01:00:00 Last Updated: 2024-08-06T16:00:08.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for remote attackers to discover credentials via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84708 - http://www-01.ibm.com/support/docview.wss?uid=swg21645927
CVE ID: CVE-2013-3039 State: PUBLISHED Published: 2013-09-12T01:00:00 Last Updated: 2024-08-06T16:00:09.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Requirements Composer before 4.0.4 does not properly perform authentication, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21645927 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84709
CVE ID: CVE-2013-3040 State: PUBLISHED Published: 2013-08-16T01:00:00 Last Updated: 2024-08-06T16:00:09.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 produces login-failure messages indicating whether the username or password is incorrect, which allows remote attackers to enumerate user accounts via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21646136 - http://www.securityfocus.com/bid/61755 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84765
CVE ID: CVE-2013-3041 State: PUBLISHED Published: 2013-10-01T00:00:00 Last Updated: 2024-08-06T16:00:09.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to obtain sensitive information from the client-server data stream via unspecified vectors associated with a "JSON hijacking attack." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84724 - http://www-01.ibm.com/support/docview.wss?uid=swg21648086
CVE ID: CVE-2013-3042 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T16:00:09.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the server in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x before 4.0.5 allows local users to read arbitrary files via vectors involving temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84768 - http://www-01.ibm.com/support/docview.wss?uid=swg21655724
CVE ID: CVE-2013-3043 State: PUBLISHED Published: 2013-12-14T22:00:00 Last Updated: 2024-08-06T16:00:09.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the client in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x before 4.0.5 allows local users to read arbitrary files via vectors involving temporary files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84769 - http://www-01.ibm.com/support/docview.wss?uid=swg21655724
CVE ID: CVE-2013-3044 State: PUBLISHED Published: 2013-11-09T01:00:00 Last Updated: 2024-08-06T16:00:10.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21654355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84815
CVE ID: CVE-2013-3045 State: PUBLISHED Published: 2013-11-09T01:00:00 Last Updated: 2024-08-06T16:00:09.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to share crafted links via the Library function. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg21654355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84816
CVE ID: CVE-2013-3046 State: PUBLISHED Published: 2014-05-26T01:00:00 Last Updated: 2024-08-06T16:00:09.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not send the HSTS Strict-Transport-Security header, which makes it easier for man-in-the-middle attackers to hijack sessions or obtain sensitive information by leveraging the presence of HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/84819 - http://www-01.ibm.com/support/docview.wss?uid=swg21671201
CVE ID: CVE-2013-3047 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T16:00:09.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-01.ibm.com/support/docview.wss?uid=swg1IV35721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84844 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085
CVE ID: CVE-2013-3048 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T16:00:08.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55070 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV36375 - http://secunia.com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - https://exchange.xforce.ibmcloud.com/
com/advisories/55068 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84845
CVE ID: CVE-2013-3049 State: PUBLISHED Published: 2013-10-01T10:00:00 Last Updated: 2024-08-06T16:00:09.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-3971. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/55068 - https://exchange.xforce.ibmcloud.com/vulnerabilities/84847 - http://www-01.ibm.com/support/docview.wss?uid=swg21651085 - http://www-01.ibm.com/support/docview.wss?uid=swg1IV37599
CVE ID: CVE-2013-3050 State: PUBLISHED Published: 2013-04-12T22:00:00 Last Updated: 2024-08-06T16:00:09.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ZAPms 1.41 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter to product. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/24942 - http://secunia.com/advisories/52946 - http://www.securityfocus.com/bid/58960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/83313 - http://packetstormsecurity.com/files/121202/ZAPms-1.41-SQL-Injection.html - http://osvdb.org/92236 - http://www.zapms.de/open_source_cms_e
security.com/files/121202/ZAPms-1.41-SQL-Injection.html - http://osvdb.org/92236 - http://www.zapms.de/open_source_cms_en
CVE ID: CVE-2013-3051 State: PUBLISHED Published: 2013-04-13T10:00:00Z Last Updated: 2024-09-17T02:48:05.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset does not verify the association between a certain physical-address argument and a memory region, which allows local users to unlock the bootloader by using kernel mode to perform crafted 0x9 and 0x2 SMC operations, a different vulnerability than CVE-2013-2596. Additional Analyst Notes: - CVE Program Container: References: - http://www.droid-life.com/
rability than CVE-2013-2596. Additional Analyst Notes: - CVE Program Container: References: - http://www.droid-life.com/2013/04/08/motorola-razr-hd-razr-m-and-atrix-hd-bootloader-unlock-released/ - http://blog.azimuthsecurity.com/2013/04/unlocking-motorola-bootloader.html
CVE ID: CVE-2013-3055 State: PUBLISHED Published: 2013-04-25T01:00:00Z Last Updated: 2024-09-16T17:33:23.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lexmark Markvision Enterprise before 1.8 provides a diagnostic interface on TCP port 9789, which allows remote attackers to execute arbitrary code, change the configuration, or obtain sensitive fleet-management information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/index?page=content&id=TE530
CVE ID: CVE-2013-3056 State: PUBLISHED Published: 2013-05-03T10:00:00Z Last Updated: 2024-09-17T01:00:50.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and delete the private messages of arbitrary users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/84-20130401-core-privilege-escalation.html
CVE ID: CVE-2013-3057 State: PUBLISHED Published: 2013-05-03T10:00:00Z Last Updated: 2024-09-16T20:12:11.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and list the privileges of arbitrary users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/82-20130402-core-information-disclosure.html
CVE ID: CVE-2013-3058 State: PUBLISHED Published: 2013-05-03T10:00:00Z Last Updated: 2024-09-16T20:16:29.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/81-20130403-core-xss-vulnerability.html
CVE ID: CVE-2013-3059 State: PUBLISHED Published: 2013-05-03T10:00:00Z Last Updated: 2024-09-17T03:13:39.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Voting plugin in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://developer.joomla.org/security/80-20130405-core-xss-vulnerability.html
CVE ID: CVE-2013-3060 State: PUBLISHED Published: 2013-04-21T21:00:00 Last Updated: 2024-08-06T16:00:09.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web console in Apache ActiveMQ before 5.8.0 does not require authentication, which allows remote attackers to obtain sensitive information or cause a denial of service via HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2013-1029.html - http://activemq.2283324.n4.nabble.com/DISCUSS-ActiveMQ-out-of-the-box-Should-not-include-the-demos-tc4658044.html - https://fisheye6.atlassian.com/changelog/activemq?cs=1404998 - http://www.securityfocus.com/bid/59402 - http:
044.html - https://fisheye6.atlassian.com/changelog/activemq?cs=1404998 - http://www.securityfocus.com/bid/59402 - http://activemq.apache.org/activemq-580-release.html - https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12323282 - http://rhn.redhat.com/errata/RHSA-2013-1221.html - https://issues.apache.org/jira/browse/AMQ-4124
CVE ID: CVE-2013-3061 State: PUBLISHED Published: 2013-05-01T10:00:00 Last Updated: 2024-08-06T16:00:09.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ISHMED-PATRED_TRANSACT_RFCCALL function in the IS-H Industry-Specific Component Hospital subsystem in SAP Healthcare Industry Solution, and the SAP ERP central component (aka ECC 6), allows remote authenticated users to bypass intended transaction restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1691744 - http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/36-privilege-escalation-in-sap-is-healthcare - ht
//www.esnc.de/sap-security-audit-and-scan-services/security-advisories/36-privilege-escalation-in-sap-is-healthcare - http://scn.sap.com/docs/DOC-8218 - http://archives.neohapsis.com/archives/bugtraq/2013-04/0176.html
CVE ID: CVE-2013-3062 State: PUBLISHED Published: 2013-05-01T10:00:00 Last Updated: 2024-08-06T16:00:09.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CP_RC_TRANSACTION_CALL_BY_SET function in the Engineering Workbench component in SAP Production Planning and Control allows remote authenticated users to bypass intended transaction restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://service.sap.com/sap/support/notes/1537089 - http://archives.neohapsis.com/archives/bugtraq/2013-04/0178.html - http://scn.sap.com/docs/DOC-8218 - http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/38-privilege-
://scn.sap.com/docs/DOC-8218 - http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/38-privilege-escalation-in-sap-production-planning-and-control
CVE ID: CVE-2013-3063 State: PUBLISHED Published: 2013-05-01T10:00:00 Last Updated: 2024-08-06T16:00:08.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAP BASIS Communication Services 4.6B through 7.30 allows remote authenticated users to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2013-04/0179.html - https://service.sap.com/sap/support/notes/1674132 - http://scn.sap.com/docs/DOC-8218 - http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/39-remote-code-execution-in-sap-connect-communication-services
CVE ID: CVE-2013-3064 State: PUBLISHED Published: 2014-09-29T22:00:00 Last Updated: 2024-08-06T16:00:09.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the target parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf - http://securityevaluators.com/knowledge/case_studies/routers/linksys_ea6500.php
CVE ID: CVE-2013-3065 State: PUBLISHED Published: 2014-09-29T22:00:00 Last Updated: 2024-08-06T16:00:09.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the Blocked Specific Sites section. Additional Analyst Notes: - CVE Program Container: References: - http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf - http://securityevaluators.com/knowledge/case_studies/routers/linksys_ea6500.php
CVE ID: CVE-2013-3066 State: PUBLISHED Published: 2014-09-29T22:00:00 Last Updated: 2024-08-06T16:00:09.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys EA6500 with firmware 1.1.28.147876 does not properly restrict access, which allows remote attackers to obtain sensitive information (clients and router configuration) via a request to /JNAP/. Additional Analyst Notes: - CVE Program Container: References: - http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf - http://securityevaluators.com/knowledge/case_studies/routers/linksys_ea6500.php
CVE ID: CVE-2013-3067 State: PUBLISHED Published: 2020-02-07T18:24:51 Last Updated: 2024-08-06T16:00:09.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys WRT310Nv2 2.0.0.1 is vulnerable to XSS. Additional Analyst Notes: - CVE Program Container: References: - http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf - http://securityevaluators.com/knowledge/case_studies/routers/linksys_wrt310v2.php - https://www.ise.io/research/studies-and-papers/linksys_wrt310v2/
CVE ID: CVE-2013-3068 State: PUBLISHED Published: 2014-09-29T22:00:00 Last Updated: 2024-08-06T16:00:09.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in apply.cgi in Linksys WRT310Nv2 2.0.0.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords and modify remote management ports. Additional Analyst Notes: - CVE Program Container: References: - http://securityevaluators.com/knowledge/case_studies/routers/linksys_wrt310v2.php - http://securityevaluators.com/knowledge/case_studies/routers/soho_router_hacks.php
CVE ID: CVE-2013-3069 State: PUBLISHED Published: 2014-04-25T17:00:00 Last Updated: 2024-08-06T16:00:10.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject arbitrary web script or HTML via the (1) UserName or (2) Password to the NAS User Setup page, (3) deviceName to USB_advanced.htm, or (4) Network Key to the Wireless Setup page. Additional Analyst Notes: - CVE Program Container: References: - http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf - http://osvdb.org/92557
CVE ID: CVE-2013-3070 State: PUBLISHED Published: 2019-11-14T18:42:39 Last Updated: 2024-08-06T16:00:09.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Information Disclosure vulnerability exists in Netgear WNDR4700 running firmware 1.0.0.34 in the management web interface, which discloses the PSK of the wireless LAN. Additional Analyst Notes: - CVE Program Container: References: - https://www.ise.io/casestudies/exploiting-soho-routers/ - https://www.ise.io/soho_service_hacks/ - https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf - https://kb.netgear.com/24413/WNDR3700v4-Firmware-Version-1-0-1-52-Except-China-and-Russia-Only - https://www.securityfocus.com/bi
b.netgear.com/24413/WNDR3700v4-Firmware-Version-1-0-1-52-Except-China-and-Russia-Only - https://www.securityfocus.com/bid/59308
CVE ID: CVE-2013-3071 State: PUBLISHED Published: 2020-01-28T20:03:19 Last Updated: 2024-08-06T16:00:09.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR Centria WNDR4700 devices with firmware 1.0.0.34 allow authentication bypass. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/59406
CVE ID: CVE-2013-3072 State: PUBLISHED Published: 2019-11-14T18:11:10 Last Updated: 2024-08-06T16:00:09.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http://<router_ip>/apply.cgi?/hdd_usr_setup.htm that when visited by any user, authenticated or not, causes the router to no longer require a password to access the web administration portal. Additional Analyst Notes: - CVE Program Container: References: - https://www.ise.io/casestudies/exploiting-soho-routers/ - https://www.ise.io/soho_service_hacks/ - https://kb.netgear.com/23728/WNDR4700-Firmware-Version-1-0-0-52 - https://www.ise
tps://www.ise.io/soho_service_hacks/ - https://kb.netgear.com/23728/WNDR4700-Firmware-Version-1-0-0-52 - https://www.ise.io/research/studies-and-papers/netgear_wndr4700/
CVE ID: CVE-2013-3073 State: PUBLISHED Published: 2019-11-14T17:47:51 Last Updated: 2024-08-06T16:00:09.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Symlink Traversal vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34. Additional Analyst Notes: - CVE Program Container: References: - https://www.ise.io/casestudies/exploiting-soho-routers/ - https://www.ise.io/soho_service_hacks/ - https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf - https://kb.netgear.com/24413/WNDR3700v4-Firmware-Version-1-0-1-52-Except-China-and-Russia-Only - https://vuldb.com/?id.8471 - https://www.securityfocus.com/bid/59307
CVE ID: CVE-2013-3074 State: PUBLISHED Published: 2020-01-28T20:07:50 Last Updated: 2024-08-06T16:00:09.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetGear WNDR4700 Media Server devices with firmware 1.0.0.34 allow remote attackers to cause a denial of service (device crash). Additional Analyst Notes: - CVE Program Container: References: - https://www.securityfocus.com/bid/59303