Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-11059

Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 before 2017-01-06, D1500 before 2017-01-06, D3600 before 2017-01-06, D6000 before 2017-01-06, D6100 before 2017-01-06, D6200 before 2017-01-06, D6200B before 2017-01-06, D6300B before 2017-01-06, D6300 before 2017-01-06, DGN1000v3 before 2017-01-06, DGN2200v1 before 2017-01-06, DGN2200v3 before 2017-01-06, DGN2200V4 before 2017-01-06, DGN2200Bv3 before 2017-01-06, DGN2200Bv4 before 2017-01-06, DGND3700v1 before 2017-01-06, DGND3700v2 before 2017-01-06, DGND3700Bv2 before 2017-01-06, JNR1010v1 before 2017-01-06, JNR1010v2 before 2017-01-06, JNR3300 before 2017-01-06, JR6100 before 2017-01-06, JR6150 before 2017-01-06, JWNR2000v5 before 2017-01-06, R2000 before 2017-01-06, R6050 before 2017-01-06, R6100 before 2017-01-06, R6200 before 2017-01-06, R6200v2 before 2017-01-06, R6220 before 2017-01-06, R6250 before 2017-01-06, R6300 before 2017-01-06, R6300v2 before 2017-01-06, R6700 before 2017-01-06, R7000 before 2017-01-06, R7900 before 2017-01-06, R7500 before 2017-01-06, R8000 before 2017-01-06, WGR614v10 before 2017-01-06, WNR1000v2 before 2017-01-06, WNR1000v3 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2000v3 before 2017-01-06, WNR2000v4 before 2017-01-06, WNR2000v5 before 2017-01-06, WNR2200 before 2017-01-06, WNR2500 before 2017-01-06, WNR3500Lv2 before 2017-01-06, WNDR3400v2 before 2017-01-06, WNDR3400v3 before 2017-01-06, WNDR3700v3 before 2017-01-06, WNDR3700v4 before 2017-01-06, WNDR3700v5 before 2017-01-06, WNDR4300 before 2017-01-06, WNDR4300v2 before 2017-01-06, WNDR4500v1 before 2017-01-06, WNDR4500v2 before 2017-01-06, and WNDR4500v3 before 2017-01-06.

Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.5, indicating it can be exploited remotely over the network with relatively low complexity without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts confidentiality (data exposure), for affected systems. Impacting 86 products from netgear, from netgear, from netgear and 83 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2020, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2020-04-28T17:15:12.460

Last Modified

2024-11-21T02:45:24.220

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

10.0

Impact Score

2.9

Weaknesses

Type: Primary
CWE-200

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	netgear	ac1450_firmware	< 2017-01-06	Yes
Hardware	netgear	ac1450	-	No
Operating System	netgear	c6300_firmware	< 2017-01-06	Yes
Hardware	netgear	c6300	-	No
Operating System	netgear	d1500_firmware	< 2017-01-06	Yes
Hardware	netgear	d1500	-	No
Operating System	netgear	d3600_firmware	< 2017-01-06	Yes
Hardware	netgear	d3600	-	No
Operating System	netgear	d500_firmware	< 2017-01-06	Yes
Hardware	netgear	d500	-	No
Operating System	netgear	d6000_firmware	< 2017-01-06	Yes
Hardware	netgear	d6000	-	No
Operating System	netgear	d6100_firmware	< 2017-01-06	Yes
Hardware	netgear	d6100	-	No
Operating System	netgear	d6200_firmware	< 2017-01-06	Yes
Hardware	netgear	d6200	-	No
Operating System	netgear	d6200b_firmware	< 2017-01-06	Yes
Hardware	netgear	d6200b	-	No
Operating System	netgear	d6300_firmware	< 2017-01-06	Yes
Hardware	netgear	d6300	-	No
Operating System	netgear	d6300b_firmware	< 2017-01-06	Yes
Hardware	netgear	d6300b	-	No
Operating System	netgear	dgn1000_firmware	< 2017-01-06	Yes
Hardware	netgear	dgn1000	v3	No
Operating System	netgear	dgn2200_firmware	< 2017-01-06	Yes
Hardware	netgear	dgn2200	v1	No
Operating System	netgear	dgn2200_firmware	< 2017-01-06	Yes
Hardware	netgear	dgn2200	v3	No
Operating System	netgear	dgn2200_firmware	< 2017-01-06	Yes
Hardware	netgear	dgn2200	v4	No
Operating System	netgear	dgn2200b_firmware	< 2017-01-06	Yes
Hardware	netgear	dgn2200b	v3	No
Operating System	netgear	dgn2200b_firmware	< 2017-01-06	Yes
Hardware	netgear	dgn2200b	v4	No
Operating System	netgear	dgnd3700_firmware	< 2017-01-06	Yes
Hardware	netgear	dgnd3700	v1	No
Operating System	netgear	dgnd3700_firmware	< 2017-01-06	Yes
Hardware	netgear	dgnd3700	v2	No
Operating System	netgear	dgnd3700b_firmware	< 2017-01-06	Yes
Hardware	netgear	dgnd3700b	v2	No
Operating System	netgear	jnr1010_firmware	< 2017-01-06	Yes
Hardware	netgear	jnr1010	v1	No
Operating System	netgear	jnr1010_firmware	< 2017-01-06	Yes
Hardware	netgear	jnr1010	v2	No
Operating System	netgear	jnr3300_firmware	< 2017-01-06	Yes
Hardware	netgear	jnr3300	-	No
Operating System	netgear	jr6100_firmware	< 2017-01-06	Yes
Hardware	netgear	jr6100	-	No
Operating System	netgear	jr6150_firmware	< 2017-01-06	Yes
Hardware	netgear	jr6150	-	No
Operating System	netgear	jwnr2000_firmware	< 2017-01-06	Yes
Hardware	netgear	jwnr2000	v5	No
Operating System	netgear	r2000_firmware	< 2017-01-06	Yes
Hardware	netgear	r2000	-	No
Operating System	netgear	r6050_firmware	< 2017-01-06	Yes
Hardware	netgear	r6050	-	No
Operating System	netgear	r6100_firmware	< 2017-01-06	Yes
Hardware	netgear	r6100	-	No
Operating System	netgear	r6200_firmware	< 2017-01-06	Yes
Hardware	netgear	r6200	-	No
Operating System	netgear	r6200_firmware	< 2017-01-06	Yes
Hardware	netgear	r6200	v2	No
Operating System	netgear	r6220_firmware	< 2017-01-06	Yes
Hardware	netgear	r6220	-	No
Operating System	netgear	r6250_firmware	< 2017-01-06	Yes
Hardware	netgear	r6250	-	No
Operating System	netgear	r6300_firmware	< 2017-01-06	Yes
Hardware	netgear	r6300	-	No
Operating System	netgear	r6300_firmware	< 2017-01-06	Yes
Hardware	netgear	r6300	v2	No
Operating System	netgear	r6700_firmware	< 2017-01-06	Yes
Hardware	netgear	r6700	-	No
Operating System	netgear	r7000_firmware	< 2017-01-06	Yes
Hardware	netgear	r7000	-	No
Operating System	netgear	r7500_firmware	< 2017-01-06	Yes
Hardware	netgear	r7500	-	No
Operating System	netgear	r7900_firmware	< 2017-01-06	Yes
Hardware	netgear	r7900	-	No
Operating System	netgear	r8000_firmware	< 2017-01-06	Yes
Hardware	netgear	r8000	-	No
Operating System	netgear	wgr614_firmware	< 2017-01-06	Yes
Hardware	netgear	wgr614	v10	No
Operating System	netgear	wndr3400_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr3400	v2	No
Operating System	netgear	wndr3400_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr3400	v3	No
Operating System	netgear	wndr3700_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr3700	v3	No
Operating System	netgear	wndr3700_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr3700	v4	No
Operating System	netgear	wndr3700_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr3700	v5	No
Operating System	netgear	wndr4300_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr4300	-	No
Operating System	netgear	wndr4300_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr4300	v2	No
Operating System	netgear	wndr4500_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr4500	v1	No
Operating System	netgear	wndr4500_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr4500	v2	No
Operating System	netgear	wndr4500_firmware	< 2017-01-06	Yes
Hardware	netgear	wndr4500	v3	No
Operating System	netgear	wnr1000_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr1000	v2	No
Operating System	netgear	wnr1000_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr1000	v3	No
Operating System	netgear	wnr1000_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr1000	v4	No
Operating System	netgear	wnr2000_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr2000	v3	No
Operating System	netgear	wnr2000_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr2000	v4	No
Operating System	netgear	wnr2000_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr2000	v5	No
Operating System	netgear	wnr2200_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr2200	-	No
Operating System	netgear	wnr2500_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr2500	-	No
Operating System	netgear	wnr3500l_firmware	< 2017-01-06	Yes
Hardware	netgear	wnr3500l	v2	No

References

https://kb.netgear.com/27253/NETGEAR-Product-Vulnerability-Advisory-Authentication-Bypass-and-Information-Disclosure-on-Home-Routers Vendor Advisory ([email protected])
https://kb.netgear.com/27253/NETGEAR-Product-Vulnerability-Advisory-Authentication-Bypass-and-Information-Disclosure-on-Home-Routers Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For netgear's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.