CVE-2016-11060 Security feature bypass in n/a
Attackers can bypass TLS security features via insecure renegotiation on affected NETGEAR routers, compromising communication integrity.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-11060?
CVE-2016-11060 is a high-severity vulnerability in n/a, published on 28 Apr 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Certain NETGEAR devices are affected by insecure renegotiation. This affects SRX5308 before 2017-02-10, FVS336Gv3 before 2017-02-10, FVS318N before 2017-02-10, and FVS318Gv2 before 2017-02-10.
Which versions are affected by CVE-2016-11060?
It affects 4 products.
Products include Netgear Fvs318g Firmware, Netgear Fvs318n Firmware, Netgear Fvs336g Firmware, Netgear Srx5308 Firmware.
How do I fix CVE-2016-11060?
No fix has been published for CVE-2016-11060 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-11060 being exploited?
There is no known exploitation of CVE-2016-11060 in the wild and no public exploit code.
Sources
Also known as GHSA-vrcx-5x3x-m79f.