CVE-2016-11055

MEDIUM

4.3

CVSS Score

Published: April 28, 2020 at 03:59 PM UTC

Updated: June 17, 2026 at 12:40 AM UTC

26 products affected across 1 vendorJNR1010 FirmwareJWNR2010 FirmwareD500 Firmware

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM4.3

Exploit prediction

EPSS 0.3%

Description

Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1 before 2017-01-11, JWNR2000Tv3 before 2017-01-11, JWNR2010v3 before 2017-01-11, PLW1000 before 2017-01-11, PLW1010 before 2017-01-11, WNR500 before 2017-01-11, WNR612v3 before 2017-01-11, N450 before 2017-01-11, and CG3000Dv2 before 2017-01-11.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

CM400 Firmware · NETGEAR

95%

v < 2017-01-11

Affected range stops below 2017-01-11, so it looks safe — our inference, not a vendor statement

netgear-cm400 (same device)

CM600 Firmware · NETGEAR

95%

v < 2017-01-11

Affected range stops below 2017-01-11, so it looks safe — our inference, not a vendor statement

netgear-cm600 (same device)

D1500 Firmware · NETGEAR

95%

v < 1.0.0.20

Affected range stops below 1.0.0.20, so it looks safe — our inference, not a vendor statement

netgear-d1500 (same device)

D500 Firmware · NETGEAR

95%

v < 2017-01-11

Affected range stops below 2017-01-11, so it looks safe — our inference, not a vendor statement

netgear-d500 (same device)

DST6501 Firmware · NETGEAR

95%

v < 1.0.0.36

Affected range stops below 1.0.0.36, so it looks safe — our inference, not a vendor statement

netgear-dst6501 (same device)

JNR1010 Firmware · NETGEAR

95%

v < 2017-01-11

Affected range stops below 2017-01-11, so it looks safe — our inference, not a vendor statement

netgear-jnr1010 (same device)

JWNR2000T Firmware · NETGEAR

95%

v < 2017-01-11

Affected range stops below 2017-01-11, so it looks safe — our inference, not a vendor statement

netgear-jwnr2000t (same device)

JWNR2010 Firmware · NETGEAR

95%

v < 2017-01-11

Affected range stops below 2017-01-11, so it looks safe — our inference, not a vendor statement

netgear-jwnr2010 (same device)

N450 CG3000D Firmware · NETGEAR

95%

v < 2017-01-11

Affected range stops below 2017-01-11, so it looks safe — our inference, not a vendor statement

netgear-n450-cg3000d (same device)

PLW1000 Firmware · NETGEAR

95%

v < 1.0.0.22

Affected range stops below 1.0.0.22, so it looks safe — our inference, not a vendor statement

netgear-plw1000 (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://kb.netgear.com/30114/NETGEAR-Product-Vulnerability-Advisory-CSRF-LocalFile-XSS

References (1)

x_refsource_CONFIRMVendor Advisory

Source: [email protected]

https://kb.netgear.com/30114/NETGEAR-Product-Vulnerability-Advisory-CSRF-LocalFile-XSS

CVSS

4.3MEDIUM[email protected]

Attack Vector: NETWORK
Complexity: LOW
Privileges: NONE
User Interaction: REQUIRED
Scope: UNCHANGED
Confidentiality: NONE
Integrity: LOW
Availability: NONE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-352

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card