GCVE - cpe:2.3:h:netgear:wndr4700:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:netgear:wndr4700:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Netgear (`99700297-c207-56f4-abd0-97ab0c8bf3ab`)
Product	Wndr4700 (`ab0d3c21-aca4-5866-9b7e-0cd1a753ef45`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-10174`	not_vulnerable	2026-06-08 05:07:17.513281	Details available The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated attacker to achieve remote code execution. Published: 2017-01-30T04:24:00.000Z Updated: 2025-10-21T23:55:46.735Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2016/Dec/72 https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt http://www.securityfocus.com/bid/95867 https://www.exploit-db.com/exploits/41719/ http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3074`	not_vulnerable	2026-06-08 05:04:30.060056	Details available NetGear WNDR4700 Media Server devices with firmware 1.0.0.34 allow remote attackers to cause a denial of service (device crash). Published: 2020-01-28T20:07:50.000Z Updated: 2024-08-06T16:00:09.431Z Open on db.gcve.eu Reference links https://www.securityfocus.com/bid/59303	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3073`	not_vulnerable	2026-06-08 05:04:30.059745	Details available A Symlink Traversal vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34. Published: 2019-11-14T17:47:51.000Z Updated: 2024-08-06T16:00:09.828Z Open on db.gcve.eu Reference links https://www.ise.io/casestudies/exploiting-soho-routers/ https://www.ise.io/soho_service_hacks/ https://www.ise.io/wp-content/uploads/2017/07/soho_techreport.pdf https://kb.netgear.com/24413/WNDR3700v4-Firmware-Version-1-0-1-52-Except-China-and-Russia-Only https://vuldb.com/?id.8471	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3072`	not_vulnerable	2026-06-08 05:04:30.059371	Details available An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http://<router_ip>/apply.cgi?/hdd_usr_setup.htm that when visited by any user, authenticated or not, causes the router to no longer require a password to access the web administration portal. Published: 2019-11-14T18:11:10.000Z Updated: 2024-08-06T16:00:09.274Z Open on db.gcve.eu Reference links https://www.ise.io/casestudies/exploiting-soho-routers/ https://www.ise.io/soho_service_hacks/ https://kb.netgear.com/23728/WNDR4700-Firmware-Version-1-0-0-52 https://www.ise.io/research/studies-and-papers/netgear_wndr4700/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3071`	not_vulnerable	2026-06-08 05:04:30.059010	Details available NETGEAR Centria WNDR4700 devices with firmware 1.0.0.34 allow authentication bypass. Published: 2020-01-28T20:03:19.000Z Updated: 2024-08-06T16:00:09.433Z Open on db.gcve.eu Reference links https://www.securityfocus.com/bid/59406	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3070`	not_vulnerable	2026-06-08 05:04:30.058681	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3069`	vulnerable	2026-06-08 05:04:30.058202	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.