VULNERABILITY INTELLIGENCE
CVE-2016-1555
CVSS score9.8 CRITICAL
EPSS probability98.29%
CISA KEVKnown exploited vulnerability
Published2017-04-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
NETGEAR Multiple WAP Devices Command Injection Vulnerability
Vendor / product: NETGEAR / Wireless Access Point (WAP) Devices
Description
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.
Weakness classification
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
Primary references
- cret@cert.org — Third Party Advisory, VDB Entry
- cret@cert.org — Mailing List, Third Party Advisory
- cret@cert.org — Patch, Vendor Advisory
- cret@cert.org — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource