high7.5
CVE-2016-1556
Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0; and WND930 before 2.0.11 allows remote attackers…
Impact
Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0; and WND930 before 2.0.11 allows remote attackers to read the wireless WPS PIN or passphrase by visiting unauthenticated webpages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Wnap320 Firmware | through 3.0.5.0 |
| Netgear | Wndap350 Firmware | through 3.0.5.0 |
| Netgear | Wndap360 Firmware | through 3.0.5.0 |
| Netgear | Wndap210v2 Firmware | through 3.0.5.0 |
| Netgear | Wn604 Firmware | through 3.3.2 |
| Netgear | Wnd930 Firmware | through 2.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html
- http://seclists.org/fulldisclosure/2016/Feb/112
- https://kb.netgear.com/30481/CVE-2016-1556-Notification?cid=wmt_netgear_organic
- http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html
- http://seclists.org/fulldisclosure/2016/Feb/112
- https://kb.netgear.com/30481/CVE-2016-1556-Notification?cid=wmt_netgear_organic