Actively exploited · Published Apr 21, 2017 · Assigned by certcc

CVE-2016-1555

Critical 9.8 Exploited

In plain English

A critical-severity command injection in Wireless Access Point (WAP) Devices from NETGEAR. Attackers are actively exploiting it in the wild (listed by CISA on March 25, 2022). The chance it is exploited in the next 30 days is estimated at 98.3% (higher than 99.9% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, Nuclei, public proof-of-concept code. Apply updates per vendor instructions.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)98.3%top 0.1% of all CVEs

Exploited in the wildYesCISA KEV since Mar 25, 2022

Attack tooling3Metasploit, Nuclei, Public PoC

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Apr 15, 2022.

Official description

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

Weakness: CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://kb.netgear.com/30480/CVE-2016-1555-Notification?cid=wmt_netgear_organic x_refsource_CONFIRM
http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html x_refsource_MISC
45909 exploit, x_refsource_EXPLOIT-DB
20160225 D-Link, Netgear Router Vulnerabiltiies mailing-list, x_refsource_FULLDISC
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1555 government-resource