Login Request a demo
Medium severity · published Apr 28, 2020
CVE-2016-11055
Certain NETGEAR devices are affected by CSRF
4.3
CVSS
0.3%
EPSS
No
On KEV
Description
Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1 before 2017-01-11, JWNR2000Tv3 before 2017-01-11, JWNR2010v3 before 2017-01-11, PLW1000 before 2017-01-11, PLW1010 before 2017-01-11, WNR500 before 2017-01-11, WNR612v3 before 2017-01-11, N450 before 2017-01-11, and CG3000Dv2 before 2017-01-11.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Cm400 Firmware · Netgear
before 2017-01-11 · source: NVD
CF
Cm600 Firmware · Netgear
before 2017-01-11 · source: NVD
DF
D1500 Firmware · Netgear
before 1.0.0.20 · source: NVD
DF
D500 Firmware · Netgear
before 2017-01-11 · source: NVD
DF
Dst6501 Firmware · Netgear
before 1.0.0.36 · source: NVD
JF
Jnr1010 Firmware · Netgear
before 2017-01-11 · source: NVD
JF
Jwnr2000t Firmware · Netgear
before 2017-01-11 · source: NVD
JF
Jwnr2010 Firmware · Netgear
before 2017-01-11 · source: NVD
NC
N450 Cg3000d Firmware · Netgear
before 2017-01-11 · source: NVD
PF
Plw1000 Firmware · Netgear
before 1.0.0.22 · source: NVD
PF
Plw1010 Firmware · Netgear
before 2017-01-11 · source: NVD
WF
Wnr500 Firmware · Netgear
before 2017-01-11 · source: NVD
Affected product
CF
Cm400 Firmware
Netgear
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-11055
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-11055
Vendor Advisory
https://kb.netgear.com/30114/NETGEAR-Product-Vulnerability-Advisory-CSRF-LocalFile-XSS
More from Cm400 Firmware
7.5
CVE-2017-18859
Certain NETGEAR devices are affected by slowdown/stoppage