CVE-2016-11057

Published: Apr 28, 2020Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618 before 2017-01-06, JWNR2000v5 before 2017-01-06, WNR2020 before 2017-01-06, JWNR2010v5 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2020v2 before 2017-01-06, R6220 before 2017-01-06, and WNDR3700v5 before 2017-01-06.

Affected (9)

Products: Netgear: Jnr1010 Firmware, Jwnr2000 Firmware, Jwnr2010 Firmware, R6220 Firmware, Wndr3700 Firmware, Wnr1000 Firmware, Wnr2020 Firmware, Wnr614 Firmware, Wnr618 Firmware

9 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Jnr1010 Firmware	Before 2017-01-06

Running on/with	Platform Versions
Netgear Jnr1010	Version v2

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Jwnr2000 Firmware	Before 2017-01-06

Running on/with	Platform Versions
Netgear Jwnr2000	Version v5

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Jwnr2010 Firmware	Before 2017-01-06

Running on/with	Platform Versions
Netgear Jwnr2010	Version v5

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear R6220 Firmware	Before 2017-01-06

Running on/with	Platform Versions
Netgear R6220	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Wndr3700 Firmware	Before 2017-01-06

Running on/with	Platform Versions
Netgear Wndr3700	Version v5

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Wnr1000 Firmware	Before 2017-01-06

Running on/with	Platform Versions
Netgear Wnr1000	Version v4

Configuration G

1 platform

Running on/with	Platform Versions
Netgear Wnr2020	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Wnr2020 Firmware	Before 2017-01-06

Running on/with	Platform Versions
Netgear Wnr2020	Version v2

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Wnr614 Firmware	Before 2017-01-06

Running on/with	Platform Versions
Netgear Wnr614	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Wnr618 Firmware	Before 2017-01-06

Running on/with	Platform Versions
Netgear Wnr618	All versions

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

https://kb.netgear.com/29960/NETGEAR-Product-Vulnerability-Advisory-Potential-security-issue-associated-with-remote-management

Source: cve@mitre.org

Vendor Advisory

https://kb.netgear.com/29960/NETGEAR-Product-Vulnerability-Advisory-Potential-security-issue-associated-with-remote-management

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.