CVE-2016-11015

published 2019-10-16

CVE-2016-11015: NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.X_TWSZ-COM_URL_Filter.BlackList.1.URL parameter.

medium 6.5 CVSS 3.1

AV N AC L PR N UI R S U C N I H A N

NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.X_TWSZ-COM_URL_Filter.BlackList.1.URL parameter.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
netgear	jnr1010_firmware	< 1.0.0.32	1.0.0.32

CWE-352