Critical severity · published Apr 21, 2017
CVE-2016-1555
NETGEAR Multiple WAP Devices Command Injection Vulnerability
In wildKEV
9.8
CVSS
98.3%
EPSS
Yes
On KEV
Description
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)98.3% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Mar 25, 2022
Federal remediation dueApr 15, 2022
Ransomware campaign useNot known
Affected products
Which versions
WF
Wn604 Firmware · Netgear
through 3.3.2 · source: NVD
WF
Wn802tv2 Firmware · Netgear
through 3.0.5.0 · source: NVD
WF
Wnap320 Firmware · Netgear
through 3.0.5.0 · source: NVD
WF
Wndap210v2 Firmware · Netgear
through 3.0.5.0 · source: NVD
WF
Wndap350 Firmware · Netgear
through 3.0.5.0 · source: NVD
WF
Wndap360 Firmware · Netgear
through 3.0.5.0 · source: NVD
WF
Wndap660 Firmware · Netgear
through 3.0.5.0 · source: NVD
WA
Wireless Access Point (WAP) Devices · NETGEAR
All versions, or not specified · source: KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-1555
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-1555
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_CONFIRM
https://kb.netgear.com/30480/CVE-2016-1555-Notification?cid=wmt_netgear_organic
x_refsource_MISC
http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html
exploit
https://www.exploit-db.com/exploits/45909/
mailing-list
http://seclists.org/fulldisclosure/2016/Feb/112
More from Wn604 Firmware
9.8
CVE-2018-21097
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker
8.0
CVE-2018-21120
Certain NETGEAR devices are affected by CSRF
7.5
CVE-2016-1556
Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0; and WND930 before 2.0.11 allows remote attackers to read the…
7.4
CVE-2018-21096
Certain NETGEAR devices are affected by CSRF
7.3
CVE-2018-21094
Certain NETGEAR devices are affected by incorrect configuration of security settings