CVE-2013-3072

An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http://<router_ip>/apply.cgi?/hdd_usr_setup.htm that when visited by any user, authenticated or not, causes the router to no longer require a password to access the web administration portal.

• CWE-287

• https://kb.netgear.com/23728/WNDR4700-Firmware-Version-1-0-0-52Vendor Advisory
• https://www.ise.io/casestudies/exploiting-soho-routers/Third Party Advisory
• https://www.ise.io/research/studies-and-papers/netgear_wndr4700/Exploit, Third Party Advisory
• https://www.ise.io/soho_service_hacks/Third Party Advisory
• https://kb.netgear.com/23728/WNDR4700-Firmware-Version-1-0-0-52Vendor Advisory
• https://www.ise.io/casestudies/exploiting-soho-routers/Third Party Advisory
• https://www.ise.io/research/studies-and-papers/netgear_wndr4700/Exploit, Third Party Advisory
• https://www.ise.io/soho_service_hacks/Third Party Advisory

Published

Nov 14, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-3066Linksys EA6500 with firmware 1.1.28.147876 does not properly…
• CVE-2013-3067Linksys WRT310Nv2 2.0.0.1 is vulnerable to XSS.5.4
• CVE-2013-3068Cross-site request forgery (CSRF) vulnerability in apply.cgi…
• CVE-2013-3069Multiple cross-site scripting (XSS) vulnerabilities in NETGE…
• CVE-2013-3070An Information Disclosure vulnerability exists in Netgear WN…7.5
• CVE-2013-3071NETGEAR Centria WNDR4700 devices with firmware 1.0.0.34 allo…9.8
• CVE-2013-3073A Symlink Traversal vulnerability exists in NETGEAR Centria …9.8
• CVE-2013-3074NetGear WNDR4700 Media Server devices with firmware 1.0.0.34…7.5
• CVE-2013-3075Multiple buffer overflows in ActUWzd.dll 1.0.0.1 in Mitsubis…
• CVE-2013-3076The crypto API in the Linux kernel through 3.9-rc8 does not …
• CVE-2013-3077Multiple integer overflows in the IP_MSFILTER and IPV6_MSFIL…
• CVE-2013-3079VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 a…