NETGEAR PLW1010 Firmware vulnerabilities

3 CVEs affecting NETGEAR PLW1010 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-11055, published 2020-04-28.

More from NETGEAR.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-18732, published 2020-04-23. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, PLW1000v2 before 1.0.0.14, and PLW1010v2 before 1.0.0.14.
• CVE-2017-18770, published 2020-04-22. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7800 before 1.0.2.36, PLW1000v2 before 1.0.0.14, and PLW1010v2 before 1.0.0.14.
• CVE-2016-11055, published 2020-04-28. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1…