CVE-2019-13395

published 2020-03-13

CVE-2019-13395: The Voo branded NETGEAR CG3700b custom firmware V2.02.03 allows CSRF against all /goform/ URIs. An attacker can modify all settings including WEP/WPA/WPA2…

high 8.8 CVSS 3.1

AV N AC L PR N UI R S U C H I H A H

The Voo branded NETGEAR CG3700b custom firmware V2.02.03 allows CSRF against all /goform/ URIs. An attacker can modify all settings including WEP/WPA/WPA2 keys, restore the router to factory settings, or even upload an entire malicious configuration file.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
netgear	cg3700b_firmware	—	—

CWE-352