critical9.8Known exploitedPublic exploit code
CVE-2016-1555
NETGEAR Multiple WAP Devices Command Injection Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-25. Federal due date: 2022-04-15.
Apply updates per vendor instructions.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Netgear Devices - (Unauthenticated) Remote Command Execution (Metasploit)2018-11-27 · remote · hardware · Verified
Impact
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Wnap320 Firmware | through 3.0.5.0 |
| Netgear | Wndap350 Firmware | through 3.0.5.0 |
| Netgear | Wndap360 Firmware | through 3.0.5.0 |
| Netgear | Wndap210v2 Firmware | through 3.0.5.0 |
| Netgear | Wn604 Firmware | through 3.3.2 |
| Netgear | Wndap660 Firmware | through 3.0.5.0 |
| Netgear | Wn802tv2 Firmware | through 3.0.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html
- http://seclists.org/fulldisclosure/2016/Feb/112
- https://kb.netgear.com/30480/CVE-2016-1555-Notification?cid=wmt_netgear_organic
- https://www.exploit-db.com/exploits/45909/
- http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html
- http://seclists.org/fulldisclosure/2016/Feb/112
- https://kb.netgear.com/30480/CVE-2016-1555-Notification?cid=wmt_netgear_organic
- https://www.exploit-db.com/exploits/45909/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1555