Sign-up

ID

VAR-202001-0882


CVE

CVE-2013-3074


TITLE

NetGear WNDR4700 Media Server  Device firmware vulnerabilities related to resource depletion

Trust: 0.8

sources: JVNDB: JVNDB-2013-007096

DESCRIPTION

NetGear WNDR4700 Media Server devices with firmware 1.0.0.34 allow remote attackers to cause a denial of service (device crash). The NetgearWNDR4700 is a wireless router device. No detailed details of the vulnerability are currently available. NetGear WNDR4700 1.0.0.34 is vulnerable

Trust: 2.43

sources: NVD: CVE-2013-3074 // JVNDB: JVNDB-2013-007096 // CNVD: CNVD-2013-04048 // BID: 59303

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2013-04048

AFFECTED PRODUCTS

vendor:netgearmodel:wndr4700scope:eqversion:1.0.0.34

Trust: 1.9

vendor:ネットギアmodel:wndr4700scope:eqversion: -

Trust: 0.8

vendor:ネットギアmodel:wndr4700scope:eqversion:1.0.0.34

Trust: 0.8

sources: CNVD: CNVD-2013-04048 // BID: 59303 // JVNDB: JVNDB-2013-007096 // NVD: CVE-2013-3074

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2013-3074
value: HIGH

Trust: 1.0

NVD: CVE-2013-3074
value: HIGH

Trust: 0.8

CNVD: CNVD-2013-04048
value: MEDIUM

Trust: 0.6

nvd@nist.gov: CVE-2013-3074
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2013-04048
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

nvd@nist.gov: CVE-2013-3074
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.1

Trust: 1.0

NVD: CVE-2013-3074
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: CNVD: CNVD-2013-04048 // JVNDB: JVNDB-2013-007096 // NVD: CVE-2013-3074

PROBLEMTYPE DATA

problemtype:CWE-400

Trust: 1.0

problemtype:Resource depletion (CWE-400) [NVD Evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2013-007096 // NVD: CVE-2013-3074

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201304-498

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201304-498

PATCH

title:WNDR4700 Firmware Version 1.0.0.52url:https://kb.netgear.com/23728/WNDR4700-Firmware-Version-1-0-0-52

Trust: 0.8

sources: JVNDB: JVNDB-2013-007096

EXTERNAL IDS

db:NVDid:CVE-2013-3074

Trust: 3.3

db:BIDid:59303

Trust: 3.3

db:JVNDBid:JVNDB-2013-007096

Trust: 0.8

db:CNVDid:CNVD-2013-04048

Trust: 0.6

db:CNNVDid:CNNVD-201304-498

Trust: 0.6

sources: CNVD: CNVD-2013-04048 // BID: 59303 // JVNDB: JVNDB-2013-007096 // CNNVD: CNNVD-201304-498 // NVD: CVE-2013-3074

REFERENCES

url:https://www.securityfocus.com/bid/59303

Trust: 2.4

url:https://nvd.nist.gov/vuln/detail/cve-2013-3074

Trust: 1.4

url:http://securityevaluators.com/content/case-studies/routers/netgear_wndr4700.jsp

Trust: 0.9

url:http://news.cnet.com/8301-1009_3-57579981-83/top-wi-fi-routers-easy-to-hack-says-study/

Trust: 0.6

url:http://securityevaluators.com/content/case-studies/routers/soho_router_hacks.jsp

Trust: 0.6

url:http://www.netgear.com

Trust: 0.3

url:http://www.netgear.com/wndr4700#

Trust: 0.3

sources: CNVD: CNVD-2013-04048 // BID: 59303 // JVNDB: JVNDB-2013-007096 // CNNVD: CNNVD-201304-498 // NVD: CVE-2013-3074

CREDITS

Jacob Holcomb

Trust: 0.9

sources: BID: 59303 // CNNVD: CNNVD-201304-498

SOURCES

db:CNVDid:CNVD-2013-04048
db:BIDid:59303
db:JVNDBid:JVNDB-2013-007096
db:CNNVDid:CNNVD-201304-498
db:NVDid:CVE-2013-3074

LAST UPDATE DATE

2024-08-14T14:38:39.140000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2013-04048date:2013-04-24T00:00:00
db:BIDid:59303date:2013-04-17T00:00:00
db:JVNDBid:JVNDB-2013-007096date:2020-02-13T00:00:00
db:CNNVDid:CNNVD-201304-498date:2020-05-25T00:00:00
db:NVDid:CVE-2013-3074date:2020-01-30T16:45:40.740

SOURCES RELEASE DATE

db:CNVDid:CNVD-2013-04048date:2013-04-24T00:00:00
db:BIDid:59303date:2013-04-17T00:00:00
db:JVNDBid:JVNDB-2013-007096date:2020-02-13T00:00:00
db:CNNVDid:CNNVD-201304-498date:2013-04-24T00:00:00
db:NVDid:CVE-2013-3074date:2020-01-28T21:15:11.497