NetSight
IP …
high8.8Known exploitedPublic exploit code

CVE-2016-6277

NETGEAR Multiple Routers Remote Code Execution Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-07. Federal due date: 2022-09-07.

Apply updates per vendor instructions.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.

Affected products

VendorProductAffected versions
NetgearD6220 Firmware
through 1.0.0.22
NetgearD6400 Firmware
through 1.0.0.56
NetgearR6250 Firmware
through 1.0.4.6_10.1.12
NetgearR6400 Firmware
through 1.0.1.18
NetgearR6700 Firmware
through 1.0.1.14
NetgearR6900 Firmware
through 1.0.1.14
NetgearR7000 Firmware
through 1.0.7.2_1.1.93
NetgearR7100lg Firmware
through 1.0.0.28
NetgearR7300dst Firmware
through 1.0.0.46
NetgearR7900 Firmware
through 1.0.1.8
NetgearR8000 Firmware
through 1.0.3.26

Weakness classification

CWE-352

References