NETGEAR JNR3300 Firmware vulnerabilities

2 CVEs affecting NETGEAR JNR3300 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-11059, published 2020-04-28.

More from NETGEAR.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-10174: NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability, published 2017-01-30. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 83.3% chance of exploitation in the next 30 days. The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited by an unauthenticated…
• CVE-2016-11059, published 2020-04-28. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 before 2017-01-06, D1500 before 2017-01-06, D3600 before 2017-01-06,…