Lucene search

CertccCVE-2016-1555

HistoryApr 21, 2017 - 3:59 p.m.

CVE-2016-1555

2017-04-2115:59:00

CWE-77

certcc

web.nvd.nist.gov

909

In Wild

netgear

wn604

wn802tv2

wnap210v2

wnap320

wndap350

wndap360

wndap660

remote code execution

cve-2016-1555

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.974

Percentile

99.9%

JSON

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.

Affected configurations

Nvd

Node

netgearwnap320_firmwareRange≤3.0.5.0

AND

netgearwnap320Match-

Node

netgearwndap350_firmwareRange≤3.0.5.0

AND

netgearwndap350Match-

Node

netgearwndap360_firmwareRange≤3.0.5.0

AND

netgearwndap360Match-

Node

netgearwndap210v2_firmwareRange≤3.0.5.0

AND

netgearwndap210v2Match-

Node

netgearwn604_firmwareRange≤3.3.2

AND

netgearwn604Match-

Node

netgearwndap660_firmwareRange≤3.0.5.0

AND

netgearwndap660Match-

Node

netgearwn802tv2_firmwareRange≤3.0.5.0

AND

netgearwn802tv2Match-

VendorProductVersionCPE
netgearwnap320_firmware*cpe:2.3:o:netgear:wnap320_firmware:*:*:*:*:*:*:*:*
netgearwnap320-cpe:2.3:h:netgear:wnap320:-:*:*:*:*:*:*:*
netgearwndap350_firmware*cpe:2.3:o:netgear:wndap350_firmware:*:*:*:*:*:*:*:*
netgearwndap350-cpe:2.3:h:netgear:wndap350:-:*:*:*:*:*:*:*
netgearwndap360_firmware*cpe:2.3:o:netgear:wndap360_firmware:*:*:*:*:*:*:*:*
netgearwndap360-cpe:2.3:h:netgear:wndap360:-:*:*:*:*:*:*:*
netgearwndap210v2_firmware*cpe:2.3:o:netgear:wndap210v2_firmware:*:*:*:*:*:*:*:*
netgearwndap210v2-cpe:2.3:h:netgear:wndap210v2:-:*:*:*:*:*:*:*
netgearwn604_firmware*cpe:2.3:o:netgear:wn604_firmware:*:*:*:*:*:*:*:*
netgearwn604-cpe:2.3:h:netgear:wn604:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netgear	wnap320_firmware	*	cpe:2.3:o:netgear:wnap320_firmware::::::::
netgear	wnap320	-	cpe:2.3:h:netgear:wnap320:-:::::::*
netgear	wndap350_firmware	*	cpe:2.3:o:netgear:wndap350_firmware::::::::
netgear	wndap350	-	cpe:2.3:h:netgear:wndap350:-:::::::*
netgear	wndap360_firmware	*	cpe:2.3:o:netgear:wndap360_firmware::::::::
netgear	wndap360	-	cpe:2.3:h:netgear:wndap360:-:::::::*
netgear	wndap210v2_firmware	*	cpe:2.3:o:netgear:wndap210v2_firmware::::::::
netgear	wndap210v2	-	cpe:2.3:h:netgear:wndap210v2:-:::::::*
netgear	wn604_firmware	*	cpe:2.3:o:netgear:wn604_firmware::::::::
netgear	wn604	-	cpe:2.3:h:netgear:wn604:-:::::::*