CVE-2016-11016: XSS
First published: Wed Oct 16 2019(Updated: )
NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netgear Jnr1010 Firmware | <1.0.0.32 | |
| NETGEAR JNR1010 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://007software.net/multiple-cross-site-scripting-in-netgear-router-version1-0-0-24/
- https://cybersecurityworks.com/zerodays/cve-2016-11016-netgear.html
- https://github.com/cybersecurityworks/Disclosed/issues/12
- https://khalil-shreateh.com/khalil.shtml/it-highlights/592-Netgear-1.0.0.24-Cross-Site-Request-Forgery--.html
- https://lists.openwall.net/full-disclosure/2016/01/11/1
- https://packetstormsecurity.com/files/135194/Netgear-1.0.0.24-Cross-Site-Scripting.html
Frequently Asked Questions
What is CVE-2016-11016?
CVE-2016-11016 is a vulnerability in NETGEAR JNR1010 devices before 1.0.0.32 that allows for XSS (Cross-Site Scripting) through the webproc?getpage= parameter.
What is the severity of CVE-2016-11016?
The severity of CVE-2016-11016 is medium, with a severity value of 6.1.
How does CVE-2016-11016 affect NETGEAR JNR1010 devices?
CVE-2016-11016 affects NETGEAR JNR1010 devices before version 1.0.0.32 by allowing for XSS attacks through the webproc?getpage= parameter.
How can I fix CVE-2016-11016?
To fix CVE-2016-11016, it is recommended to upgrade the firmware of NETGEAR JNR1010 devices to version 1.0.0.32 or above.
Where can I find more information about CVE-2016-11016?
For more information about CVE-2016-11016, you can refer to the following references: [link1] [link2] [link3].
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/weakness
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/netgear
- canonical/netgear jnr1010 firmware
- canonical/netgear jnr1010