CVE-2016-1555

Summary

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://kb.netgear.com/30480/CVE-2016-1555-Notification?cid=wmt_netgear_organic
• http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html
• https://www.exploit-db.com/exploits/45909/
• http://seclists.org/fulldisclosure/2016/Feb/112

CISA ADP Vulnrichment

• SSVC:
• Exploitation: active
  • Automatable: yes
  • Technical Impact: total

Additional References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1555

References

• https://kb.netgear.com/30480/CVE-2016-1555-Notification?cid=wmt_netgear_organic
• http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html
• https://www.exploit-db.com/exploits/45909/
• http://seclists.org/fulldisclosure/2016/Feb/112

• ←Previous
• Next→