Replacement firmware
Hardwarev1
Beta build · 10-13-2026-r66345
Browse firmware downloadsdownload1.dd-wrt.comNetwork switch
NETGEAR GS110TPP
Projects for this device
Replacement firmware
Replace router software with a customizable system for network controls and community packages.
How to get started
Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.
- Setup
- Firmware replacement; route varies by router
- You’ll need
- Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
- v1
- Get OpenWrt firmware Release listed · 25.12.6
- v1
- Open hardware record Release listed · 25.12.5
Recorded configuration: 32 MB flash; 128 MB RAM
- Limitations
- Ports 9 and 10 may not function properly
- First installation
- U-Boot TFTP + serial recovery
Features & details
Check the project and hardware shown for each feature.
Device details
netgear gs110tpp v1 — device documentation (github.com)Device details — v1 — Source documentation (openwrt.org)
- Hardware revision
- v1
OpenWrt · v1
- Installation routes recorded
- U-Boot TFTP + serial recovery
- Recovery routes recorded
- U-Boot TFTP + serial recovery
- Availability recorded by source
- Available 2021
Hardware details
Documented hardware
netgear gs110tpp v1 — device documentation (github.com)Documented hardware — v1 — Source documentation (openwrt.org)
- Hardware revision
- v1
- Flash
- 32 MB
- Processor
- Realtek RTL8380M
- Memory
- 128 MB
- Hardware revision
- v1
Security
Saved scan
From our saved security research.
Model advisories
Selected highlightsPrioritized by known exploitation, severity, then date.
NETGEAR GS110TPP
Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (disabled by default) /sqfs/bin/sccd daemon, which fails to check…
- Affected firmware
- GS110TPP: before 7.0.7.2
- Manufacturer fix listed in
7.0.7.2
Details and sources
GS110TPP fixed in firmware version 7.0.7.2
Manufacturer fix — 7.0.7.2 ↗Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the (disabled by default) /sqfs/bin/sccd daemon, which fails to check authentication when the authentication TLV is missing from a received NSDP packet. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPP before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110TUP before 1.0.5.3, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS710TUP before 1.0.5.3, GS716TP before 1.0.4.2, GS716TPP before 1.0.4.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS750E before 1.0.1.10, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.
NETGEAR GS110TPP
Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenticated attacker who uses the same source IP address as an admin in…
- Affected firmware
- GS110TPP: before 7.0.7.2
- Manufacturer fix listed in
7.0.7.2
Details and sources
GS110TPP fixed in firmware version 7.0.7.2
Manufacturer fix — 7.0.7.2 ↗Certain NETGEAR smart switches are affected by an authentication hijacking race-condition vulnerability by an unauthenticated attacker who uses the same source IP address as an admin in the process of logging in (e.g., behind the same NAT device, or already in possession of a foothold on an admin's machine). This occurs because the multi-step HTTP authentication process is effectively tied only to the source IP address. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPP before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110TUP before 1.0.5.3, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS710TUP before 1.0.5.3, GS716TP before 1.0.4.2, GS716TPP before 1.0.4.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS750E before 1.0.1.10, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.
NETGEAR GS110TPP
Certain NETGEAR devices are affected by command injection by an authenticated user
- Affected firmware
- GS110TPP: before 7.0.7.2
- Fix
- Fix details in the linked record
Details and sources
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GS108Tv2 before 5.4.2.36, GS110TPP before 7.0.7.2, GS110TPv2 before 5.4.2.36., GS110TPv3 before 7.0.7.2, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.
NETGEAR GS110TPP
Certain NETGEAR devices are affected by command injection by an authenticated user
- Affected firmware
- GS110TPP: before 7.0.7.2
- Fix
- Fix details in the linked record
Details and sources
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110TPP before 7.0.7.2, GS110TUP before 1.0.5.3, GS710TUP before 1.0.5.3, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS710TUP before 1.0.5.3, GS716TP before 1.0.4.2, GS716TPP before 1.0.4.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS724TPP before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS752TPv2 before 6.0.8.2, GS752TPP before 6.0.8.2, GS750E before 1.0.1.10, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.
NETGEAR GS110TPP
Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several faulty aspects of the authentication scheme - allows the attacker to…
- Affected firmware
- GS110TPP: before 7.0.7.2
- Manufacturer fix listed in
7.0.7.2
Details and sources
GS110TPP fixed in firmware version 7.0.7.2
Manufacturer fix — 7.0.7.2 ↗Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several faulty aspects of the authentication scheme - allows the attacker to create (or overwrite) a file with specific content (e.g., the "2" string). This leads to admin session crafting and therefore gaining full web UI admin privileges by an unauthenticated attacker. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPP before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110TUP before 1.0.5.3, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS710TUP before 1.0.5.3, GS716TP before 1.0.4.2, GS716TPP before 1.0.4.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS750E before 1.0.1.10, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.