PT-2020-7984 · NetGear · Dst6501+13

Published 2020-04-28 · Updated 2020-05-05 · CVE-2016-11055

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions: CM400 versions before 2017-01-11 CM600 versions before 2017-01-11 D1500 versions before 2017-01-11 D500 versions before 2017-01-11 DST6501 versions before 2017-01-11 JNR1010v1 versions before 2017-01-11 JWNR2000Tv3 versions before 2017-01-11 JWNR2010v3 versions before 2017-01-11 PLW1000 versions before 2017-01-11 PLW1010 versions before 2017-01-11 WNR500 versions before 2017-01-11 WNR612v3 versions before 2017-01-11 N450 versions before 2017-01-11 CG3000Dv2 versions before 2017-01-11

Description: Certain NETGEAR devices are affected by a CSRF issue.

Recommendations: For CM400 versions before 2017-01-11, update to a version released after 2017-01-11. For CM600 versions before 2017-01-11, update to a version released after 2017-01-11. For D1500 versions before 2017-01-11, update to a version released after 2017-01-11. For D500 versions before 2017-01-11, update to a version released after 2017-01-11. For DST6501 versions before 2017-01-11, update to a version released after 2017-01-11. For JNR1010v1 versions before 2017-01-11, update to a version released after 2017-01-11. For JWNR2000Tv3 versions before 2017-01-11, update to a version released after 2017-01-11. For JWNR2010v3 versions before 2017-01-11, update to a version released after 2017-01-11. For PLW1000 versions before 2017-01-11, update to a version released after 2017-01-11. For PLW1010 versions before 2017-01-11, update to a version released after 2017-01-11. For WNR500 versions before 2017-01-11, update to a version released after 2017-01-11. For WNR612v3 versions before 2017-01-11, update to a version released after 2017-01-11. For N450 versions before 2017-01-11, update to a version released after 2017-01-11. For CG3000Dv2 versions before 2017-01-11, update to a version released after 2017-01-11.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2016-11055

Affected Products

Cg3000Dv2

Cm400

Cm600

D1500

D500

Dst6501

Jnr1010V1

Jwnr2000Tv3

Jwnr2010V3

N450

Plw1000

Plw1010

Wnr500

Wnr612V3

References · 4

• https://kb.netgear.com/30114/NETGEAR-Product-Vulnerability-Advisory-CSRF-LocalFile-XSS · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-11055 · Security Note
• https://osv.dev/vulnerability/CVE-2016-11055 · Vendor Advisory
• https://t.me/cibsecurity/11705 · Telegram Post