CVE-2016-11057: NETGEAR JNR1010 Firmware

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618 before 2017-01-06, JWNR2000v5 before 2017-01-06, WNR2020 before 2017-01-06, JWNR2010v5 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2020v2 before 2017-01-06, R6220 before 2017-01-06, and WNDR3700v5 before 2017-01-06.

Affected products

• NETGEAR JNR1010 Firmware: before 2017-01-06 (fixed in 2017-01-06)
• NETGEAR JWNR2000 Firmware: before 2017-01-06 (fixed in 2017-01-06)
• NETGEAR JWNR2010 Firmware: before 2017-01-06 (fixed in 2017-01-06)
• NETGEAR r6220 Firmware: before 2017-01-06 (fixed in 2017-01-06)
• NETGEAR WNDR3700 Firmware: before 2017-01-06 (fixed in 2017-01-06)
• NETGEAR WNR1000 Firmware: before 2017-01-06 (fixed in 2017-01-06)
• NETGEAR WNR2020 Firmware: before 2017-01-06 (fixed in 2017-01-06)
• NETGEAR WNR614 Firmware: before 2017-01-06 (fixed in 2017-01-06)
• NETGEAR WNR618 Firmware: before 2017-01-06 (fixed in 2017-01-06)

Published 2020-04-28. Last modified 2026-06-17.