Router

NETGEAR WNR3500L

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v1 · 64 MB memory
Memory: 64 MBGet OpenWrt firmware Release listed · 25.12.6
v2 · 128 MB memory
Memory: 128 MBGet OpenWrt firmware Release listed · 25.12.6

v2 · 128 MB memory

Limitations
WiFi 2.4GHz NAND flash
First installation
CFE TFTP + serial recovery
Limitations
WiFi 2.4GHz
Limitations
NAND flash
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

netgear wnr3500l v1 — device documentation (github.com)Netgear WNR3500Lv1 — WikiDevi (github.com)

Hardware revision
v1

Device details

netgear wnr3500l v2 — device documentation (github.com)Netgear WNR3500Lv2 — WikiDevi (github.com)

Hardware revision
v2

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
v1

OpenWrt · v1 · 64 MB memory

OpenWrt · v1 · 64 MB memory — Source documentation (openwrt.org)

Recovery routes recorded
CFE TFTP + serial recovery
Availability recorded by source
Discontinued

Device details

Device details — Source documentation (openwrt.org)

Hardware revision
v2

OpenWrt · v2 · 128 MB memory

OpenWrt · v2 · 128 MB memory — Source documentation (openwrt.org)

Installation routes recorded
CFE TFTP + serial recovery
Recovery routes recorded
CFE TFTP + serial recovery
Availability recorded by source
Discontinued

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

NETGEAR WNR3500L

NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the CSRF tokens.

CVE-2013-3516

Affected firmware
Version scope unspecified in source
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the CSRF tokens.

NETGEAR WNR3500L

Cross-site scripting (XSS) vulnerability in NETGEAR WNR3500U and WNR3500L.

CVE-2013-3517

Affected firmware
Version scope unspecified in source
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

Cross-site scripting (XSS) vulnerability in NETGEAR WNR3500U and WNR3500L.

NETGEAR WNR3500L

Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service.

CVE-2013-4657

Affected firmware
Version scope unspecified in source
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service.

NETGEAR WNR3500L

Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi

CVE-2019-17372

Affected firmware
Version scope unspecified in source
Fix
Fix details in the linked record
Read mitre CVE record
Details and sources

Certain NETGEAR devices allow remote attackers to disable all authentication requirements by visiting genieDisableLanChanged.cgi. The attacker can then, for example, visit MNU_accessPassword_recovered.html to obtain a valid new admin password. This affects AC1450, D8500, DC112A, JNDR3000, LG2200D, R4500, R6200, R6200V2, R6250, R6300, R6300v2, R6400, R6700, R6900P, R6900, R7000P, R7000, R7100LG, R7300, R7900, R8000, R8300, R8500, WGR614v10, WN2500RPv2, WNDR3400v2, WNDR3700v3, WNDR4000, WNDR4500, WNDR4500v2, WNR1000, WNR1000v3, WNR3500L, and WNR3500L.

Check more security advisories for this device · CVE.org