VulnerabilityModified

CVE-2016-11055

Certain NETGEAR devices are affected by CSRF.

MEDIUM 4.3EPSS 0.35%

Does this matter?

Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own.

Description

Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1 before 2017-01-11, JWNR2000Tv3 before 2017-01-11, JWNR2010v3 before 2017-01-11, PLW1000 before 2017-01-11, PLW1010 before 2017-01-11, WNR500 before 2017-01-11, WNR612v3 before 2017-01-11, N450 before 2017-01-11, and CG3000Dv2 before 2017-01-11.

CVSS 3.1: 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS: 0.35% probability · 28th percentile
CISA KEV: Not listed
Weakness: CWE-352
Affected: netgear/cm400 firmware · netgear/cm600 firmware · netgear/d1500 firmware · netgear/d500 firmware · netgear/dst6501 firmware · netgear/jnr1010 firmware · netgear/jwnr2000t firmware · netgear/jwnr2010 firmware · netgear/plw1000 firmware · netgear/plw1010 firmware · netgear/wnr500 firmware · netgear/wnr612 firmware · netgear/n450 cg3000d firmware
Source: cve@mitre.org

References

https://kb.netgear.com/30114/NETGEAR-Product-Vulnerability-Advisory-CSRF-LocalFile-XSSVendor Advisory
https://kb.netgear.com/30114/NETGEAR-Product-Vulnerability-Advisory-CSRF-LocalFile-XSSVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.