VULNERABILITY INTELLIGENCE
CVE-2013-3069
CVSS score3.5 LOW
EPSS probability1.09%
CISA KEVNot currently listed
Published2014-04-25
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:N/I:P/A:N
Description
Multiple cross-site scripting (XSS) vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject arbitrary web script or HTML via the (1) UserName or (2) Password to the NAS User Setup page, (3) deviceName to USB_advanced.htm, or (4) Network Key to the Wireless Setup page.
Weakness classification
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')