9.8Kritik
KEV
CVE-2016-1555NETGEAR Multiple WAP Devices Command Injection Vulnerability
Aktif olarak istismar ediliyor — NETGEAR Multiple WAP Devices Command Injection Vulnerability
CISA bu açığın gerçek saldırılarda kullanıldığını 25.03.2022 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 15.04.2022.
Gerekli işlem: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2016-1555
Açıklama
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.
Zayıflık türü (CWE):
CWE-77
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| netgear | wn604 firmware | ≤ 3.3.2 | |
| netgear | wn802tv2 firmware | ≤ 3.0.5.0 | |
| netgear | wnap320 firmware | ≤ 3.0.5.0 | |
| netgear | wndap210v2 firmware | ≤ 3.0.5.0 | |
| netgear | wndap350 firmware | ≤ 3.0.5.0 | |
| netgear | wndap360 firmware | ≤ 3.0.5.0 | |
| netgear | wndap660 firmware | ≤ 3.0.5.0 |
Kaynaklar ve yamalar
- https://kb.netgear.com/30480/CVE-2016-1555-Notification?cid=wmt_netgear_organic PatchVendor Advisory
- http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html Third Party AdvisoryVDB Entry
- 45909 exploitExploitThird Party AdvisoryVDB Entry
- 20160225 D-Link, Netgear Router Vulnerabiltiies mailing-listMailing ListThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1555 US Government Resource
CPE eşleşmeleri (NVD) (7)
cpe:2.3:o:netgear:wnap320_firmware:*:*:*:*:*:*:*:*≤ 3.0.5.0cpe:2.3:o:netgear:wndap350_firmware:*:*:*:*:*:*:*:*≤ 3.0.5.0cpe:2.3:o:netgear:wndap360_firmware:*:*:*:*:*:*:*:*≤ 3.0.5.0cpe:2.3:o:netgear:wndap210v2_firmware:*:*:*:*:*:*:*:*≤ 3.0.5.0cpe:2.3:o:netgear:wn604_firmware:*:*:*:*:*:*:*:*≤ 3.3.2cpe:2.3:o:netgear:wndap660_firmware:*:*:*:*:*:*:*:*≤ 3.0.5.0cpe:2.3:o:netgear:wn802tv2_firmware:*:*:*:*:*:*:*:*≤ 3.0.5.0