CVE-2016-11057

7.5 highEPSS 1.0%

Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618 before 2017-01-06, JWNR2000v5 before 2017-01-06, WNR2020 before 2017-01-06, JWNR2010v5 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2020v2 before 2017-01-06, R6220 before 2017-01-06, and WNDR3700v5 before 2017-01-06.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2020-04-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

netgear:jnr1010_firmware
netgear:jwnr2000_firmware
netgear:jwnr2010_firmware
netgear:r6220_firmware
netgear:wndr3700_firmware
netgear:wnr1000_firmware
netgear:wnr2020_firmware
netgear:wnr614_firmware
netgear:wnr618_firmware

References

https://kb.netgear.com/29960/NETGEAR-Product-Vulnerability-Advisory-Potential-security-issue-associated-with-remote-management
https://kb.netgear.com/29960/NETGEAR-Product-Vulnerability-Advisory-Potential-security-issue-associated-with-remote-management

Check your stack JSON