What this actually is.
Technical background, root cause, and affected surface.
A Cross-site request forgery vulnerability was identified on NETGEAR JNR1010 devices before 1.0.0.32 allow cgibin/webprocCSRFviathe: InternetGatewayDevice. X_TWSZCOM_URL_Filter.BlackList.1.URL parameter. This vulnerability is due to insufficient CSRF protections for the web UI on an affected device.
- Vendor
- NetGear
- Affected Product
- JNR1010_firmware
- CVE
- CVE-2016-11015
- Securin ID
- 2016-CSW-01-1016
- Status
- Fixed
- Date
- October 28, 2015
- Severity
- Medium
- CVSS Score
- 6.5
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- CWE
- CWE-352
From one request
to root shell.
Reproduced in a sandboxed environment. Requires only LAN or WiFi adjacency.
We created a forged request by changing the value of any variable. In InternetGatewayDevice.X_TWSZ-COM_URL_Filter.BlackList.1 variable in the URL http://router-ip/cgi-bin/webproc was sent to the victim by forcing him/her to click on the malicious link generated by an attacker. With different sessions, it allows the attacker to change the settings of the victim’s router.
Note: Similarly, we can manipulate any request and can force the victim to access the link generated by the attacker to make changes to the router settings without the victim’s knowledge.
What an attacker does to you.
Post-exploitation outcomes mapped to CVSS impact metrics.
An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user.
Fix it. In this order.
A runbook, not a checklist. Sequence matters — assume compromise before you act.
Download the latest updated firmware and update it as per vendor advisory.
disclose@securin.ioVendors moved in days.
Attackers in hours.
Reconstructed from vendor advisories, CISA bulletins, and Securin research records.
Discovered vulnerability in Netgear Router Firmware Version 1.0.0.24
Reported to vendor
Netgear’s technical team address the issue after follow-up
Vulnerability got fixed
Updated Netgear Router JNR1010 version 1.0.0.32 was released
Disclosed 63 days after discovery
Cite, verify, go deeper.
Primary sources — NVD, CISA KEV, and machine-readable IoC feed.