Netgear Jwnr2000 Firmware vulnerabilities

CVE-2025-4115 [HIGH] CWE-119 CVE-2025-4115: A vulnerability classified as critical was found in Netgear JWNR2000v2 1.0.0.11. Affected by this vu A vulnerability classified as critical was found in Netgear JWNR2000v2 1.0.0.11. Affected by this vulnerability is the function default_version_is_new. The manipulation of the argument host leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-4114 [HIGH] CWE-119 CVE-2025-4114: A vulnerability classified as critical has been found in Netgear JWNR2000v2 1.0.0.11. Affected is th A vulnerability classified as critical has been found in Netgear JWNR2000v2 1.0.0.11. Affected is the function check_language_file. The manipulation of the argument host leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-4116 [HIGH] CWE-119 CVE-2025-4116: A vulnerability, which was classified as critical, has been found in Netgear JWNR2000v2 1.0.0.11. Af A vulnerability, which was classified as critical, has been found in Netgear JWNR2000v2 1.0.0.11. Affected by this issue is the function get_cur_lang_ver. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-4117 [MEDIUM] CWE-119 CVE-2025-4117: A vulnerability, which was classified as critical, was found in Netgear JWNR2000v2 1.0.0.11. This af A vulnerability, which was classified as critical, was found in Netgear JWNR2000v2 1.0.0.11. This affects the function sub_41A914. The manipulation of the argument host leads to buffer overflow. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2016-11057 [HIGH] CWE-287 CVE-2016-11057: Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 be Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618 before 2017-01-06, JWNR2000v5 before 2017-01-06, WNR2020 before 2017-01-06, JWNR2010v5 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2020v2 before 2017-01-06, R6220 before 2017-01-06, and WNDR3700v5

CVE-2016-11059 [HIGH] CWE-200 CVE-2016-11059: Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6 Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 before 2017-01-06, D1500 before 2017-01-06, D3600 before 2017-01-06, D6000 before 2017-01-06, D6100 before 2017-01-06, D6200 before 2017-01-06, D6200B before 2017-01-06, D6300B before 2017-01-06, D6300 before 2017-01-06, DGN1