Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-11059

Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 before 2017-01-06, D1500 before 2017-01-06, D3600 before 2017-01-06, D6000 before 2017-01-06, D6100 before 2017-01-06, D6200 before 2017-01-06, D6200B before 2017-01-06, D6300B before 2017-01-06, D6300 before 2017-01-06, DGN1000v3 before 2017-01-06, DGN2200v1 before 2017-01-06, DGN2200v3 before 2017-01-06, DGN2200V4 before 2017-01-06, DGN2200Bv3 before 2017-01-06, DGN2200Bv4 before 2017-01-06, DGND3700v1 before 2017-01-06, DGND3700v2 before 2017-01-06, DGND3700Bv2 before 2017-01-06, JNR1010v1 before 2017-01-06, JNR1010v2 before 2017-01-06, JNR3300 before 2017-01-06, JR6100 before 2017-01-06, JR6150 before 2017-01-06, JWNR2000v5 before 2017-01-06, R2000 before 2017-01-06, R6050 before 2017-01-06, R6100 before 2017-01-06, R6200 before 2017-01-06, R6200v2 before 2017-01-06, R6220 before 2017-01-06, R6250 before 2017-01-06, R6300 before 2017-01-06, R6300v2 before 2017-01-06, R6700 before 2017-01-06, R7000 before 2017-01-06, R7900 before 2017-01-06, R7500 before 2017-01-06, R8000 before 2017-01-06, WGR614v10 before 2017-01-06, WNR1000v2 before 2017-01-06, WNR1000v3 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2000v3 before 2017-01-06, WNR2000v4 before 2017-01-06, WNR2000v5 before 2017-01-06, WNR2200 before 2017-01-06, WNR2500 before 2017-01-06, WNR3500Lv2 before 2017-01-06, WNDR3400v2 before 2017-01-06, WNDR3400v3 before 2017-01-06, WNDR3700v3 before 2017-01-06, WNDR3700v4 before 2017-01-06, WNDR3700v5 before 2017-01-06, WNDR4300 before 2017-01-06, WNDR4300v2 before 2017-01-06, WNDR4500v1 before 2017-01-06, WNDR4500v2 before 2017-01-06, and WNDR4500v3 before 2017-01-06.

Published

2020-04-28T17:15:12.460

Last Modified

2024-11-21T02:45:24.220

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

10.0

Impact Score

2.9

Weaknesses

Type: Primary
CWE-200

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	netgear	ac1450_firmware	< 2017-01-06	Yes
Hardware	netgear	ac1450	-	No
Operating System	netgear	c6300_firmware	< 2017-01-06	Yes
Hardware	netgear	c6300	-	No
Operating System	netgear	d1500_firmware	< 2017-01-06	Yes
Hardware	netgear	d1500	-	No
Operating System	netgear	d3600_firmware	< 2017-01-06	Yes
Hardware	netgear	d3600	-	No
Operating System	netgear	d500_firmware	< 2017-01-06	Yes
Hardware	netgear	d500	-	No
Operating System	netgear	d6000_firmware	< 2017-01-06	Yes
Hardware	netgear	d6000	-	No
Operating System	netgear	d6100_firmware	< 2017-01-06	Yes
Hardware	netgear	d6100	-	No
Operating System	netgear	d6200_firmware	< 2017-01-06	Yes
Hardware	netgear	d6200	-	No
Operating System	netgear	d6200b_firmware	< 2017-01-06	Yes
Hardware	netgear	d6200b	-	No
Operating System	netgear	d6300_firmware	< 2017-01-06	Yes
Hardware	netgear	d6300	-	No
Operating System	netgear	d6300b_firmware	< 2017-01-06	Yes
Hardware	netgear	d6300b	-	No
Operating System	netgear	dgn1000_firmware	< 2017-01-06	Yes
Hardware	netgear	dgn1000	v3	No
Operating System	netgear	dgn2200_firmware	< 2017-01-06	Yes
Hardware	netgear	dgn2200	v1	No
Operating System	netgear	dgn2200_firmware	< 2017-01-06	Yes
Hardware	netgear	dgn2200	v3	No
Operating System	netgear	dgn2200_firmware	< 2017-01-06	Yes
Hardware	netgear	dgn2200	v4	No
Operating System	netgear	dgn2200b_firmware	< 2017-01-06	Yes
Hardware	netgear	dgn2200b	v3	No
Operating System	netgear	dgn2200b_firmware	< 2017-01-06	Yes
Hardware	netgear	dgn2200b	v4	No
Operating System	netgear	dgnd3700_firmware	< 2017-01-06	Yes
Hardware	netgear	dgnd3700	v1	No
Operating System	netgear	dgnd3700_firmware	< 2017-01-06	Yes
Hardware	netgear	dgnd3700	v2	No
Operating System	netgear	dgnd3700b_firmware	< 2017-01-06	Yes
Hardware	netgear	dgnd3700b	v2	No
Operating System	netgear	jnr1010_firmware	< 2017-01-06	Yes
Hardware	netgear	jnr1010	v1	No
Operating System	netgear	jnr1010_firmware	< 2017-01-06	Yes
Hardware	netgear	jnr1010	v2	No
Operating System	netgear	jnr3300_firmware	< 2017-01-06	Yes
Hardware	netgear	jnr3300	-	No
Operating System	netgear	jr6100_firmware	< 2017-01-06	Yes
Hardware	netgear	jr6100	-	No
Operating System	netgear	jr6150_firmware	< 2017-01-06	Yes
Hardware	netgear	jr6150	-	No
Operating System	netgear	jwnr2000_firmware	< 2017-01-06	Yes
Hardware	netgear	jwnr2000	v5	No
Operating System	netgear	r2000_firmware	< 2017-01-06	Yes
Hardware	netgear	r2000	-	No
Operating System	netgear	r6050_firmware	< 2017-01-06	Yes
Hardware	netgear	r6050	-	No
Operating System	netgear	r6100_firmware	< 2017-01-06	Yes
Hardware	netgear	r6100	-	No
Operating System	netgear	r6200_firmware	< 2017-01-06	Yes
Hardware	netgear	r6200	-	No
Operating System	netgear	r6200_firmware	< 2017-01-06	Yes
Hardware	netgear	r6200	v2	No
Operating System	netgear	r6220_firmware	< 2017-01-06	Yes
Hardware	netgear	r6220	-	No
Operating System	netgear	r6250_firmware	< 2017-01-06	Yes
Hardware	netgear	r6250	-	No
Operating System	netgear	r6300_firmware	< 2017-01-06	Yes
Hardware	netgear	r6300	-	No
Operating System	netgear	r6300_firmware	< 2017-01-06	Yes
Hardware	netgear	r6300	v2	No
Operating System	netgear	r6700_firmware	< 2017-01-06	Yes
Hardware	netgear	r6700	-	No
Operating System	netgear	r7000_firmware	< 2017-01-06	Yes
Hardware	netgear	r7000	-	No
Operating System	netgear	r7500_firmware	< 2017-01-06	Yes
Hardware	netgear	r7500	-	No
Operating System	netgear	r7900_firmware	< 2017-01-06	Yes
Hardware	netgear	r7900	-	No
Operating System	netgear	r8000_firmware	< 2017-01-06	Yes
Hardware	netgear	r8000	-	No
Operating System	netgear	wgr614_firmware	< 2017-01-06	Yes
Hardware	netgear	wgr614	v10	No
Operating System	netgear	wndr3400_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr3400	v2	No
Operating System	netgear	wndr3400_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr3400	v3	No
Operating System	netgear	wndr3700_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr3700	v3	No
Operating System	netgear	wndr3700_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr3700	v4	No
Operating System	netgear	wndr3700_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr3700	v5	No
Operating System	netgear	wndr4300_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr4300	-	No
Operating System	netgear	wndr4300_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr4300	v2	No
Operating System	netgear	wndr4500_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr4500	v1	No
Operating System	netgear	wndr4500_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr4500	v2	No
Operating System	netgear	wndr4500_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr4500	v3	No
Operating System	netgear	wnr1000_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr1000	v2	No
Operating System	netgear	wnr1000_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr1000	v3	No
Operating System	netgear	wnr1000_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr1000	v4	No
Operating System	netgear	wnr2000_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr2000	v3	No
Operating System	netgear	wnr2000_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr2000	v4	No
Operating System	netgear	wnr2000_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr2000	v5	No
Operating System	netgear	wnr2200_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr2200	-	No
Operating System	netgear	wnr2500_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr2500	-	No
Operating System	netgear	wnr3500l_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr3500l	v2	No

References

https://kb.netgear.com/27253/NETGEAR-Product-Vulnerability-Advisory-Authentication-Bypass-and-Information-Disclosure-on-Home-Routers Vendor Advisory ([email protected])
https://kb.netgear.com/27253/NETGEAR-Product-Vulnerability-Advisory-Authentication-Bypass-and-Information-Disclosure-on-Home-Routers Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)