What’s Vulnerable › Vulnerabilities

CVE-2016-11060

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-28 · updated 2026-06-17

Description

Certain NETGEAR devices are affected by insecure renegotiation. This affects SRX5308 before 2017-02-10, FVS336Gv3 before 2017-02-10, FVS318N before 2017-02-10, and FVS318Gv2 before 2017-02-10.

Affected products

• NETGEAR Fvs318G Firmware: before 2017-02-10 — fixed in 2017-02-10
• NETGEAR Fvs318N Firmware: before 2017-02-10 — fixed in 2017-02-10
• NETGEAR Fvs336G Firmware: before 2017-02-10 — fixed in 2017-02-10
• Netgear SRX5308: before 2017-02-10 — fixed in 2017-02-10

How to fix

Upgrade to a fixed version: NETGEAR Fvs318G Firmware 2017-02-10; NETGEAR Fvs318N Firmware 2017-02-10; NETGEAR Fvs336G Firmware 2017-02-10; Netgear SRX5308 2017-02-10. Check the vendor advisory for mitigations.

References

• https://kb.netgear.com/31426/SSL-Renegotiation-Denial-of-Service-Vulnerability
• https://kb.netgear.com/31426/SSL-Renegotiation-Denial-of-Service-Vulnerability

Get alerted when CVE-2016-11060 or the next vulnerability affects your stack