CVE-2013-3072

Name of the Vulnerable Software and Affected Versions NETGEAR Centria WNDR4700 Firmware version 1.0.0.34

Description An Authentication Bypass issue exists, allowing any user to access the web administration portal without a password by visiting a specific URL. The affected URL is http:///apply.cgi?/hdd usr setup.htm.

Recommendations For NETGEAR Centria WNDR4700 Firmware version 1.0.0.34, as a temporary workaround, consider restricting access to the apply.cgi endpoint until a patch is available. Avoid using the /hdd usr setup.htm page in the affected API endpoint until the issue is resolved.