NetSight
medium4.3

CVE-2016-11055

Certain NETGEAR devices are affected by CSRF.

Impact

Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1 before 2017-01-11, JWNR2000Tv3 before 2017-01-11, JWNR2010v3 before 2017-01-11, PLW1000 before 2017-01-11, PLW1010 before 2017-01-11, WNR500 before 2017-01-11, WNR612v3 before 2017-01-11, N450 before 2017-01-11, and CG3000Dv2 before 2017-01-11.

Affected products

VendorProductAffected versions
NetgearCm400 Firmware
before 2017-01-11
NetgearCm600 Firmware
before 2017-01-11
NetgearD1500 Firmware
before 1.0.0.20
NetgearD500 Firmware
before 2017-01-11
NetgearDst6501 Firmware
before 1.0.0.36
NetgearJnr1010 Firmware
before 2017-01-11
NetgearJwnr2000t Firmware
before 2017-01-11
NetgearJwnr2010 Firmware
before 2017-01-11
NetgearPlw1000 Firmware
before 1.0.0.22
NetgearPlw1010 Firmware
before 2017-01-11
NetgearWnr500 Firmware
before 2017-01-11
NetgearWnr612 Firmware
before 2017-01-11

Weakness classification

References