PT-2020-7988 · NetGear · Wndr3700V3+55

Published 2020-04-28 · Updated 2020-05-06 · CVE-2016-11059

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: NETGEAR AC1450 version before 2017-01-06 NETGEAR C6300 version before 2017-01-06 NETGEAR D500 version before 2017-01-06 NETGEAR D1500 version before 2017-01-06 NETGEAR D3600 version before 2017-01-06 NETGEAR D6000 version before 2017-01-06 NETGEAR D6100 version before 2017-01-06 NETGEAR D6200 version before 2017-01-06 NETGEAR D6200B version before 2017-01-06 NETGEAR D6300B version before 2017-01-06 NETGEAR D6300 version before 2017-01-06 NETGEAR DGN1000v3 version before 2017-01-06 NETGEAR DGN2200v1 version before 2017-01-06 NETGEAR DGN2200v3 version before 2017-01-06 NETGEAR DGN2200V4 version before 2017-01-06 NETGEAR DGN2200Bv3 version before 2017-01-06 NETGEAR DGN2200Bv4 version before 2017-01-06 NETGEAR DGND3700v1 version before 2017-01-06 NETGEAR DGND3700v2 version before 2017-01-06 NETGEAR DGND3700Bv2 version before 2017-01-06 NETGEAR JNR1010v1 version before 2017-01-06 NETGEAR JNR1010v2 version before 2017-01-06 NETGEAR JNR3300 version before 2017-01-06 NETGEAR JR6100 version before 2017-01-06 NETGEAR JR6150 version before 2017-01-06 NETGEAR JWNR2000v5 version before 2017-01-06 NETGEAR R2000 version before 2017-01-06 NETGEAR R6050 version before 2017-01-06 NETGEAR R6100 version before 2017-01-06 NETGEAR R6200 version before 2017-01-06 NETGEAR R6200v2 version before 2017-01-06 NETGEAR R6220 version before 2017-01-06 NETGEAR R6250 version before 2017-01-06 NETGEAR R6300 version before 2017-01-06 NETGEAR R6300v2 version before 2017-01-06 NETGEAR R6700 version before 2017-01-06 NETGEAR R7000 version before 2017-01-06 NETGEAR R7900 version before 2017-01-06 NETGEAR R7500 version before 2017-01-06 NETGEAR R8000 version before 2017-01-06 NETGEAR WGR614v10 version before 2017-01-06 NETGEAR WNR1000v2 version before 2017-01-06 NETGEAR WNR1000v3 version before 2017-01-06 NETGEAR WNR1000v4 version before 2017-01-06 NETGEAR WNR2000v3 version before 2017-01-06 NETGEAR WNR2000v4 version before 2017-01-06 NETGEAR WNR2000v5 version before 2017-01-06 NETGEAR WNR2200 version before 2017-01-06 NETGEAR WNR2500 version before 2017-01-06 NETGEAR WNR3500Lv2 version before 2017-01-06 NETGEAR WNDR3400v2 version before 2017-01-06 NETGEAR WNDR3400v3 version before 2017-01-06 NETGEAR WNDR3700v3 version before 2017-01-06 NETGEAR WNDR3700v4 version before 2017-01-06 NETGEAR WNDR3700v5 version before 2017-01-06 NETGEAR WNDR4300 version before 2017-01-06 NETGEAR WNDR4300v2 version before 2017-01-06 NETGEAR WNDR4500v1 version before 2017-01-06 NETGEAR WNDR4500v2 version before 2017-01-06 NETGEAR WNDR4500v3 version before 2017-01-06

Description: Certain NETGEAR devices are affected by password exposure.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-11059

Affected Products

Ac1450

C6300

D1500

D3600

D500

D6000

D6100

D6200

D6200B

D6300

D6300B

Dgn1000V3

Dgn2200Bv3

Dgn2200V4

Dgn2200V1

Dgnd3700Bv2

Dgnd3700V1

Jnr1010V1

Jnr1010V2

Jnr3300

Jr6100

Jr6150

Wnr2000V5

R2000

R6050

R6100

R6200

R6200V2

R6220

R6250

R6300

R6300V2

R6700

R7000

R7500

R7900

R8000

Wgr614V10

Wndr3400V2

Wndr3400V3

Wndr3700V3

Wndr3700V4

Wndr3700V5

Wndr4300

Wndr4300V2

Wndr4500V1

Wndr4500V2

Wndr4500V3

Wnr1000V2

Wnr1000V3

Wnr1000V4

Wnr2000V3

Wnr2000V4

Wnr2200

Wnr2500

Wnr3500Lv2

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-11059 · Security Note
• https://osv.dev/vulnerability/CVE-2016-11059 · Vendor Advisory
• https://kb.netgear.com/27253/NETGEAR-Product-Vulnerability-Advisory-Authentication-Bypass-and-Information-Disclosure-on-Home-Routers · Vendor Advisory
• https://t.me/cvenotify/3347 · Telegram Post
• https://t.me/cibsecurity/11701 · Telegram Post