CVE-2016-1555: NETGEAR Multiple WAP Devices Command Injection Vulnerability
First published: Fri Apr 21 2017(Updated: )
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.
Credit: cret@cert.org cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Netgear Wnap320 Firmware | <=3.0.5.0 | |
| netgear wnap320 | ||
| Netgear Wndap350 Firmware | <=3.0.5.0 | |
| Netgear Wndap350 | ||
| Netgear Wndap360 Firmware | <=3.0.5.0 | |
| Netgear Wndap360 | ||
| Netgear Wndap210v2 Firmware | <=3.0.5.0 | |
| Netgear Wndap210v2 | ||
| Netgear Wn604 Firmware | <=3.3.2 | |
| Netgear WN604 | ||
| Netgear Wndap660 Firmware | <=3.0.5.0 | |
| Netgear Wndap660 | ||
| Netgear Wn802tv2 Firmware | <=3.0.5.0 | |
| Netgear Wn802tv2 | ||
| NETGEAR Wireless Access Point (WAP) Devices | ||
| All of | ||
| Netgear Wnap320 Firmware | <=3.0.5.0 | |
| netgear wnap320 | ||
| All of | ||
| Netgear Wndap350 Firmware | <=3.0.5.0 | |
| Netgear Wndap350 | ||
| All of | ||
| Netgear Wndap360 Firmware | <=3.0.5.0 | |
| Netgear Wndap360 | ||
| All of | ||
| Netgear Wndap210v2 Firmware | <=3.0.5.0 | |
| Netgear Wndap210v2 | ||
| All of | ||
| Netgear Wn604 Firmware | <=3.3.2 | |
| Netgear WN604 | ||
| All of | ||
| Netgear Wndap660 Firmware | <=3.0.5.0 | |
| Netgear Wndap660 | ||
| All of | ||
| Netgear Wn802tv2 Firmware | <=3.0.5.0 | |
| Netgear Wn802tv2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://kb.netgear.com/30480/CVE-2016-1555-Notification?cid=wmt_netgear_organic
- http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html
- https://www.exploit-db.com/exploits/45909/
- http://seclists.org/fulldisclosure/2016/Feb/112
- https://nvd.nist.gov/vuln/detail/CVE-2016-1555
- agent/type
- agent/description
- agent/title
- agent/severity
- agent/weakness
- agent/remedy
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/references
- agent/softwarecombine
- agent/event
- agent/tags
- collector/nvd-cve
- source/NVD
- vendor/netgear
- canonical/netgear wnap320 firmware
- version/netgear wnap320 firmware/3.0.5.0
- canonical/netgear wnap320
- canonical/netgear wndap350 firmware
- version/netgear wndap350 firmware/3.0.5.0
- canonical/netgear wndap350
- canonical/netgear wndap360 firmware
- version/netgear wndap360 firmware/3.0.5.0
- canonical/netgear wndap360
- canonical/netgear wndap210v2 firmware
- version/netgear wndap210v2 firmware/3.0.5.0
- canonical/netgear wndap210v2
- canonical/netgear wn604 firmware
- version/netgear wn604 firmware/3.3.2
- canonical/netgear wn604
- canonical/netgear wndap660 firmware
- version/netgear wndap660 firmware/3.0.5.0
- canonical/netgear wndap660
- canonical/netgear wn802tv2 firmware
- version/netgear wn802tv2 firmware/3.0.5.0
- canonical/netgear wn802tv2
- canonical/netgear wireless access point (wap) devices