NETGEAR WNDR3700v2
From Wiki-IoT
(diff) ← Older revision | Approved revision (diff) | Latest revision (diff) | Newer revision → (diff)
| NETGEAR WNDR3700v2 | ||
|---|---|---|
|
Security Grade
Calculator v1
|
NETGEAR WNDR3700v2
Brand: NETGEAR Category: SOHO N600 wireless dual-band gigabit router (802.11n) • Model / Gen: WNDR3700v2 (N600 dual-band gigabit router; firmware 1.0.1.14 documented as affected) Release Date: 2010-10-01 • Status: End of life Classification Date: 2026-10-23 • [www.netgear.com/support/product/wndr3700v2 Official Website] | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | None | [www.downloads.netgear.com/files/GDC/WNDR3700V2/WNDR3700v2_SM_19OCT2010.pdf 🔗 Proof] | Documentary assessment, NOT device testing. The opened October 2010 setup manual describes a standard sealed SOHO appliance; no physical-tampering feature or documented tampering incident appears in opened sources. |
| Known vulnerabilities | Rare | [nvd.nist.gov/vuln/detail/CVE-2023-0849 🔗 Proof] | Documentary assessment, NOT device testing. Per NVD CPE mapping for hardware WNDR3700 v2, firmware 1.0.1.14 has CVE-2023-0849 (web interface command injection, CWE-77, public exploit disclosed), CVE-2023-0848 (web management interface DoS, NVD 7.5 HIGH), and CVE-2023-0850 (web interface DoS); NVD lists only these records for the v2 CPE, so coverage is limited rather than prolific. |
| Prior attacks | Rare | [nvd.nist.gov/vuln/detail/CVE-2023-0849 🔗 Proof] | Documentary assessment, NOT device testing. The VulDB-sourced CVE notes the exploit has been publicly disclosed; opened sources document no observed mass compromise campaign or botnet membership specific to WNDR3700v2. |
| Updatability | None | [www.netgear.com/support/product/wndr3700v2 🔗 Proof] | Documentary assessment, NOT device testing. The official NETGEAR support page states "This product is End of Service — no additional firmware updates planned," with firmware 1.0.1.14 listed as Latest; maintenance has fully ceased. |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | No | [www.netgear.com/support/product/wndr3700v2 🔗 Proof] | Documentary assessment, NOT device testing. Official page documents standalone local management; no cloud account, SSO, or external identity integration described. |
| Communications | No encryption | [www.downloads.netgear.com/files/GDC/WNDR3700V2/WNDR3700v2_SM_19OCT2010.pdf 🔗 Proof] | Documentary assessment, NOT device testing. The setup manual directs users to reach management over plain www.routerlogin.net, www.routerlogin.com, or 192.168.1.1; no HTTPS admin channel documented. |
| Storage | No encryption | [www.downloads.netgear.com/files/GDC/WNDR3700V2/WNDR3700v2_SM_19OCT2010.pdf 🔗 Proof] | Documentary assessment, NOT device testing. The opened official setup manual describes factory-default configuration and credential storage without documenting any encryption of the configuration at rest; no encrypted-storage mechanism is described in opened sources. |
| Category Score | Score: 3 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Basic | [www.downloads.netgear.com/files/GDC/WNDR3700V2/WNDR3700v2_SM_19OCT2010.pdf 🔗 Proof] | Documentary assessment, NOT device testing. Manual documents a single admin account whose password can be changed; no multi-user/role management. |
| Authentication | Basic | [www.downloads.netgear.com/files/GDC/WNDR3700V2/WNDR3700v2_SM_19OCT2010.pdf 🔗 Proof] | Documentary assessment, NOT device testing. Single local username/password login over plain HTTP; no MFA documented. |
| Brute-force protection | Absent | [www.downloads.netgear.com/files/GDC/WNDR3700V2/WNDR3700v2_SM_19OCT2010.pdf 🔗 Proof] | Documentary assessment, NOT device testing. The opened setup manual describes no login lockout, throttling, or brute-force countermeasure. |
| Event logging | Absent | [www.downloads.netgear.com/files/GDC/WNDR3700V2/WNDR3700v2_SM_19OCT2010.pdf 🔗 Proof] | Documentary assessment, NOT device testing. The opened setup manual documents no authentication-event logging or audit facility; no log trail is described. |
| Passwords | Default/Common/Easy to guess | [www.downloads.netgear.com/files/GDC/WNDR3700V2/WNDR3700v2_SM_19OCT2010.pdf 🔗 Proof] | Documentary assessment, NOT device testing. Factory default login is admin / password (lowercase) per the manual's default configuration section; no forced rotation or complexity documented. |
| Category Score | Score: 3 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | proprietary Linux firmware (Companion App: ) |
| Hardware (CPU / GPU) | CPU: • GPU: |
| Memory & Storage | Memory: • Storage: |
| Power, Battery & Charging | Battery: • Power: • Charging: |
| Display & Camera | Display: • Camera: |
| Sound & Connectivity | Sound: • Connectivity: |
| Physical (Dimensions & Mass) | Dimensions: • Mass: |
