CVE-2016-1555criticalunder attackCWE-77

CVE-2016-1555

Published · Updated

Follow this CVE+ Monitor Wireless Access Point Devices

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 98%
from disclosure to weapon533 days
Published on NVDApr 21
1st PoC+533d
metasploitFeb 25
CISA KEV+1799d
Action required by CISAfederal deadline: 2022-04-15

Apply updates per vendor instructions.

In short

Netgear wireless access points contain a vulnerability that allows attackers on the network to run any command they want on the device without permission, potentially taking complete control of it.

Technical detail

Multiple PHP scripts in affected Netgear devices lack proper input validation on user-supplied parameters, enabling OS command injection via network requests. Remote unauthenticated attackers can execute arbitrary commands with device privileges by sending specially crafted requests to vulnerable endpoints.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.