HIGH✓ PATCH🇬🇧 English

CVE-2016-11057

CVSS 7.5v3.1pub. 2020-04-28upd. 2024-11-21

Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618 before 2017-01-06, JWNR2000v5 before 2017-01-06, WNR2020 before 2017-01-06, JWNR2010v5 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2020v2 before 2017-01-06, R6220 before 2017-01-06, and WNDR3700v5 before 2017-01-06.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Netgear Jnr1010

    HW
    Netgear
    v2

  • Netgear Jnr1010 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear Jwnr2000

    HW
    Netgear
    v5

  • Netgear Jwnr2000 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear Jwnr2010

    HW
    Netgear
    v5

  • Netgear Jwnr2010 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear R6220

    HW
    Netgear
    wszystkie wersje

  • Netgear R6220 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear Wndr3700

    HW
    Netgear
    v5

  • Netgear Wndr3700 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear Wnr1000

    HW
    Netgear
    v4

  • Netgear Wnr1000 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear Wnr2020

    HW
    Netgear
    v2

  • Netgear Wnr2020 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear Wnr614

    HW
    Netgear
    wszystkie wersje

  • Netgear Wnr614 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear Wnr618

    HW
    Netgear
    wszystkie wersje

  • Netgear Wnr618 Firmware

    OS
    Netgear
    < 2017-01-06
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
Auth Bypass
CWE
Referencje

Powiązane podatności

CVE-2016-10174CRITICAL9.8⚠ KEVten sam produkt

The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL...

CVE-2021-45501CRITICAL9.4ten sam produkt

Certain NETGEAR devices are affected by authentication bypass. This affects AC2400 before 1.1.0.84, AC2600 bef...

CVE-2021-38516CRITICAL10.0ten sam produkt

Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6220 befor...

CVE-2021-29068CRITICAL9.9ten sam produkt

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6700v3 befor...

CVE-2020-35800CRITICAL9.4ten sam produkt

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 befo...