CVE-2016-1555

NETGEAR Multiple WAP Devices Command Injection Vulnerability

Wnap320 Firmware

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.

21. Apr 2017

Ausgewertete Quellen

• Hersteller
  https://kb.netgear.com/30480/CVE-2016-1555-Notification?cid=wmt_netgear_organic
• Hinweis
  http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html
• Hinweis
  http://seclists.org/fulldisclosure/2016/Feb/112
• Hinweis
  https://www.exploit-db.com/exploits/45909/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1555
• CISA
  NETGEAR Multiple WAP Devices Command Injection Vulnerability
• NVD
  CVE-2016-1555