PT-2019-7807 · NetGear · Netgear Jnr1010

Sathish Kumar · Publicado 2019-10-16 · Atualizado 2020-11-10 · CVE-2016-11014

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR JNR1010 versions prior to 1.0.0.32

Description The issue is related to Incorrect Access Control due to the ok value of the auth cookie being a special case.

Recommendations For versions prior to 1.0.0.32, update to version 1.0.0.32 or later to resolve the issue.

Exploit

Correção

Insufficient Session Expiration

Enumeração de Fraquezas

CWE-613

Identificadores relacionados

CVE-2016-11014

Produtos afetados

Netgear Jnr1010

Referências · 7

• 🔥 https://github.com/cybersecurityworks/Disclosed/issues/14 · Exploit
• 🔥 https://khalil-shreateh.com/khalil.shtml/it-highlights/593-Netgear-1.0.0.24-Bypass---Improper-Session-Management--.html · Exploit
• 🔥 https://lists.openwall.net/full-disclosure/2016/01/11/5 · Exploit
• 🔥 https://cybersecurityworks.com/zerodays/cve-2016-11014-netgear.html · Exploit
• 🔥 https://packetstormsecurity.com/files/135216/Netgear-1.0.0.24-Bypass-Improper-Session-Management.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-11014 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-11014 · Aviso do Fabricante