What’s Vulnerable › Vulnerabilities
CVE-2016-11059
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-04-28 · updated 2026-06-17
- Weakness: CWE-200
Description
Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 before 2017-01-06, D1500 before 2017-01-06, D3600 before 2017-01-06, D6000 before 2017-01-06, D6100 before 2017-01-06, D6200 before 2017-01-06, D6200B before 2017-01-06, D6300B before 2017-01-06, D6300 before 2017-01-06, DGN1000v3 before 2017-01-06, DGN2200v1 before 2017-01-06, DGN2200v3 before 2017-01-06, DGN2200V4 before 2017-01-06, DGN2200Bv3 before 2017-01-06, DGN2200Bv4 before 2017-01-06, DGND3700v1 before 2017-01-06, DGND3700v2 before 2017-01-06, DGND3700Bv2 before 2017-01-06, JNR1010v1 before 2017-01-06, JNR1010v2 before 2017-01-06, JNR3300 before 2017-01-06, JR6100 before 2017-01-06, JR6150 before 2017-01-06, JWNR2000v5 before 2017-01-06, R2000 before 2017-01-06, R6050 before 2017-01-06, R6100 before 2017-01-06, R6200 before 2017-01-06, R6200v2 before 2017-01-06, R6220 before 2017-01-06, R6250 before 2017-01-06, R6300 before 2017-01-06, R6300v2 before 2017-01-06, R6700 before 2017-01-06, R7000 before 2017-01-06, R7900 before 2017-01-06, R7500 before 2017-01-06, R8000 before 2017-01-06, WGR614v10 before 2017-01-06, WNR1000v2 before 2017-01-06, WNR1000v3 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2000v3 before 2017-01-06, WNR2000v4 before 2017-01-06, WNR2000v5 before 2017-01-06, WNR2200 before 2017-01-06, WNR2500 before 2017-01-06, WNR3500Lv2 before 2017-01-06, WNDR3400v2 before 2017-01-06, WNDR3400v3 before 2017-01-06, WNDR3700v3 before 2017-01-06, WNDR3700v4 before 2017-01-06, WNDR3700v5 before 2017-01-06, WNDR4300 before 2017-01-06, WNDR4300v2 before 2017-01-06, WNDR4500v1 before 2017-01-06, WNDR4500v2 before 2017-01-06, and WNDR4500v3 before 2017-01-06.
Affected products
- NETGEAR Ac1450 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR C6300 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR D1500 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR D3600 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR D500 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR D6000 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR D6100 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR D6200 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR D6200B Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR D6300 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR D6300B Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR DGN1000: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR Dgn2200 Firmware: before 2017-01-06 — fixed in 2017-01-06
- Netgear DGN2200B: before 2017-01-06 — fixed in 2017-01-06
- Netgear DGND3700: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR Dgnd3700B Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR Jnr1010 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR Jnr3300 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR Jr6100 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR JR6150: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR Jwnr2000 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR R2000 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR R6050 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR R6100 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR R6200 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR R6220 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR R6250 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR R6300 Firmware: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR R6700: before 2017-01-06 — fixed in 2017-01-06
- NETGEAR R7000: before 2017-01-06 — fixed in 2017-01-06
How to fix
Upgrade to a fixed version: NETGEAR Ac1450 Firmware 2017-01-06; NETGEAR C6300 Firmware 2017-01-06; NETGEAR D1500 Firmware 2017-01-06; NETGEAR D3600 Firmware 2017-01-06; NETGEAR D500 Firmware 2017-01-06; NETGEAR D6000 Firmware 2017-01-06; NETGEAR D6100 Firmware 2017-01-06; NETGEAR D6200 Firmware 2017-01-06; NETGEAR D6200B Firmware 2017-01-06; NETGEAR D6300 Firmware 2017-01-06; NETGEAR D6300B Firmware 2017-01-06; NETGEAR DGN1000 2017-01-06. Check the vendor advisory for mitigations.
References
- https://kb.netgear.com/27253/NETGEAR-Product-Vulnerability-Advisory-Authentication-Bypass-and-Information-Disclosure-on-Home-Routers
- https://kb.netgear.com/27253/NETGEAR-Product-Vulnerability-Advisory-Authentication-Bypass-and-Information-Disclosure-on-Home-Routers
Get alerted when CVE-2016-11059 or the next vulnerability affects your stack