CVE-2016-11014

Critical

NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case.

mitre·CWE-613·Published 2019-10-16

CVSS

9.8

EPSS

0.03

KEV

Exploits

cve.orgen

128 chars

NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case.

NVDen

128 chars

NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case.

Los dispositivos NETGEAR JNR1010 versiones anteriores a 1.0.0.32, presenta un Control de Acceso Incorrecto porque el valor satisfactorio de la cookie de autenticación es un caso especial.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H