GCVE - cpe:2.3:h:netgear:wnr3500l:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:netgear:wnr3500l:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Netgear (`99700297-c207-56f4-abd0-97ab0c8bf3ab`)
Product	Wnr3500L (`4fc1f5dd-869b-566a-aba2-91a9d2b5a73c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-17372`	not_vulnerable	2026-06-08 05:13:10.422807	Details available Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNU_accessPassword_recovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D, R4500, R6200, R6200V2, R6250, R6300, R6300v2, R6400, R6700, R6900P, R6900, R7000P, R7000, R7100LG, R7300, R7900, R8000, R8300, R8500, WGR614v10, WN2500RPv2, WNDR3400v2, WNDR3700v3, WNDR4000, WNDR4500, WNDR4500v2, WNR1000, WNR1000v3, WNR3500L, and WNR3500L. Published: 2019-10-09T12:06:57.000Z Updated: 2024-08-05T01:40:15.201Z Open on db.gcve.eu Reference links https://github.com/zer0yu/CVE_Request/blob/master/netgear/netgear_cgi_unauthorized_access_vulnerability.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4657`	not_vulnerable	2026-06-08 05:04:49.010644	Details available Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service. Published: 2019-11-13T17:33:39.000Z Updated: 2024-08-06T16:52:26.965Z Open on db.gcve.eu Reference links https://www.ise.io/soho_service_hacks/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3517`	not_vulnerable	2026-06-08 05:04:31.867040	Details available Cross-site scripting (XSS) vulnerability in NETGEAR WNR3500U and WNR3500L. Published: 2019-11-13T18:03:57.000Z Updated: 2024-08-06T16:14:56.238Z Open on db.gcve.eu Reference links https://www.ise.io/casestudies/exploiting-soho-routers/ https://www.ise.io/soho_service_hacks/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3516`	not_vulnerable	2026-06-08 05:04:31.864941	Details available NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the CSRF tokens. Published: 2019-11-13T19:30:07.000Z Updated: 2024-08-06T16:14:56.543Z Open on db.gcve.eu Reference links https://www.ise.io/casestudies/exploiting-soho-routers/ https://www.ise.io/soho_service_hacks/ https://www.ise.io/research/studies-and-papers/netgear_wnr3500/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.