CVE-2016-11055
Medium
Description
Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1 before 2017-01-11, JWNR2000Tv3 before 2017-01-11, JWNR2010v3 before 2017-01-11, PLW1000 before 2017-01-11, PLW1010 before 2017-01-11, WNR500 before 2017-01-11, WNR612v3 before 2017-01-11, N450 before 2017-01-11, and CG3000Dv2 before 2017-01-11.
SeverityMedium
CVSS4.3
Exploit probability—
Product
Netgear Cm400 Firmware
PublishedApr 28, 2020
First seenApr 28, 2020
How to fix
Update
- netgear cm400_firmware2017-01-11 or later
- netgear cm600_firmware2017-01-11 or later
- netgear d1500_firmware1.0.0.20 or later
- netgear d500_firmware2017-01-11 or later
- netgear dst6501_firmware1.0.0.36 or later
- netgear jnr1010_firmware2017-01-11 or later
- netgear jwnr2000t_firmware2017-01-11 or later
- netgear jwnr2010_firmware2017-01-11 or later
- netgear plw1000_firmware1.0.0.22 or later
- netgear plw1010_firmware2017-01-11 or later
- netgear wnr500_firmware2017-01-11 or later
- netgear wnr612_firmware2017-01-11 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear cm400_firmware | v < 2017-01-11 | 2017-01-11 |
| netgear cm600_firmware | v < 2017-01-11 | 2017-01-11 |
| netgear d1500_firmware | v < 1.0.0.20 | 1.0.0.20 |
| netgear d500_firmware | v < 2017-01-11 | 2017-01-11 |
| netgear dst6501_firmware | v < 1.0.0.36 | 1.0.0.36 |
| netgear jnr1010_firmware | v < 2017-01-11 | 2017-01-11 |
| netgear jwnr2000t_firmware | v < 2017-01-11 | 2017-01-11 |
| netgear jwnr2010_firmware | v < 2017-01-11 | 2017-01-11 |
| netgear plw1000_firmware | v < 1.0.0.22 | 1.0.0.22 |
| netgear plw1010_firmware | v < 2017-01-11 | 2017-01-11 |
| netgear wnr500_firmware | v < 2017-01-11 | 2017-01-11 |
| netgear wnr612_firmware | v < 2017-01-11 | 2017-01-11 |
| netgear n450_cg3000d_firmware | v < 2017-01-11 | 2017-01-11 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.