CVE-2016-11057

moderate-risk
Published 2020-04-28

Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618 before 2017-01-06, JWNR2000v5 before 2017-01-06, WNR2020 before 2017-01-06, JWNR2010v5 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2020v2 before 2017-01-06, R6220 before 2017-01-06, and WNDR3700v5 before 2017-01-06.

Do I need to act?

-
0.34% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (9)

Jwnr2000 Firmware
Wnr614 Firmware

Affected Vendors

Netgear

References (2)

Vendor Advisory https://kb.netgear.com/29960/NETGEAR-Product-Vulnerability-Advisory-Potential-se...
Vendor Advisory https://kb.netgear.com/29960/NETGEAR-Product-Vulnerability-Advisory-Potential-se...
42
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 1/34 · Minimal
Exposure 15/34 · Moderate