HIGH✓ PATCH🇬🇧 English

CVE-2016-11059

CVSS 7.5v3.1pub. 2020-04-28upd. 2024-11-21

Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 before 2017-01-06, D1500 before 2017-01-06, D3600 before 2017-01-06, D6000 before 2017-01-06, D6100 before 2017-01-06, D6200 before 2017-01-06, D6200B before 2017-01-06, D6300B before 2017-01-06, D6300 before 2017-01-06, DGN1000v3 before 2017-01-06, DGN2200v1 before 2017-01-06, DGN2200v3 before 2017-01-06, DGN2200V4 before 2017-01-06, DGN2200Bv3 before 2017-01-06, DGN2200Bv4 before 2017-01-06, DGND3700v1 before 2017-01-06, DGND3700v2 before 2017-01-06, DGND3700Bv2 before 2017-01-06, JNR1010v1 before 2017-01-06, JNR1010v2 before 2017-01-06, JNR3300 before 2017-01-06, JR6100 before 2017-01-06, JR6150 before 2017-01-06, JWNR2000v5 before 2017-01-06, R2000 before 2017-01-06, R6050 before 2017-01-06, R6100 before 2017-01-06, R6200 before 2017-01-06, R6200v2 before 2017-01-06, R6220 before 2017-01-06, R6250 before 2017-01-06, R6300 before 2017-01-06, R6300v2 before 2017-01-06, R6700 before 2017-01-06, R7000 before 2017-01-06, R7900 before 2017-01-06, R7500 before 2017-01-06, R8000 before 2017-01-06, WGR614v10 before 2017-01-06, WNR1000v2 before 2017-01-06, WNR1000v3 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2000v3 before 2017-01-06, WNR2000v4 before 2017-01-06, WNR2000v5 before 2017-01-06, WNR2200 before 2017-01-06, WNR2500 before 2017-01-06, WNR3500Lv2 before 2017-01-06, WNDR3400v2 before 2017-01-06, WNDR3400v3 before 2017-01-06, WNDR3700v3 before 2017-01-06, WNDR3700v4 before 2017-01-06, WNDR3700v5 before 2017-01-06, WNDR4300 before 2017-01-06, WNDR4300v2 before 2017-01-06, WNDR4500v1 before 2017-01-06, WNDR4500v2 before 2017-01-06, and WNDR4500v3 before 2017-01-06.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Netgear Ac1450

    HW
    Netgear
    wszystkie wersje

  • Netgear Ac1450 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear C6300

    HW
    Netgear
    wszystkie wersje

  • Netgear C6300 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear D1500

    HW
    Netgear
    wszystkie wersje

  • Netgear D1500 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear D3600

    HW
    Netgear
    wszystkie wersje

  • Netgear D3600 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear D500

    HW
    Netgear
    wszystkie wersje

  • Netgear D500 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear D6000

    HW
    Netgear
    wszystkie wersje

  • Netgear D6000 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear D6100

    HW
    Netgear
    wszystkie wersje

  • Netgear D6100 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear D6200

    HW
    Netgear
    wszystkie wersje

  • Netgear D6200b

    HW
    Netgear
    wszystkie wersje

  • Netgear D6200b Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear D6200 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear D6300

    HW
    Netgear
    wszystkie wersje

  • Netgear D6300b

    HW
    Netgear
    wszystkie wersje

  • Netgear D6300b Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear D6300 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear Dgn1000

    HW
    Netgear
    v3

  • Netgear Dgn1000 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear Dgn2200

    HW
    Netgear
    v1v3v4

  • Netgear Dgn2200b

    HW
    Netgear
    v3v4

  • Netgear Dgn2200b Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear Dgn2200 Firmware

    OS
    Netgear
    < 2017-01-06

  • Netgear Dgnd3700

    HW
    Netgear
    v1v2

  • Netgear Dgnd3700b

    HW
    Netgear
    v2
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2017-6862CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Buffer overflow w routerach NETGEAR WNR2000 umożliwia RCE bez uwierzytelnienia

CVE-2017-6077CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Command injection w NETGEAR DGN2200 przez ping.cgi

CVE-2016-10174CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Buffer overflow w routerze NETGEAR WNR2000v5 umożliwiający RCE bez uwierzytelnienia

CVE-2013-10060CRITICAL9.4PL ✓ten sam produkt

Command injection w routerach Netgear DGN2200B via pppoe.cgi

CVE-2025-4978CRITICAL9.3PL ✓ten sam produkt

Netgear DGND3700 — pominięcie uwierzytelniania w /BRS_top.html