CVE-2016-6277

HIGHCISA KEV

8.8

Descricao

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.

Detalhes CVE

Pontuacao CVSS v3.18.8

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioREQUIRED

Publicado12/14/2016

Ultima modificacao4/21/2026

Fontekev

Avistamentos honeypot0

CISA KEV

FornecedorNETGEAR

ProdutoMultiple Routers

Nome da vulnerabilidadeNETGEAR Multiple Routers Remote Code Execution Vulnerability

Data inclusao KEV2022-03-07

Prazo de remediacao2022-09-07

Uso em ransomwareUnknown

Produtos afetados

netgear:d6220netgear:d6220_firmwarenetgear:d6400netgear:d6400_firmwarenetgear:r6250netgear:r6250_firmwarenetgear:r6400netgear:r6400_firmwarenetgear:r6700netgear:r6700_firmwarenetgear:r6900netgear:r6900_firmwarenetgear:r7000netgear:r7000_firmwarenetgear:r7100lgnetgear:r7100lg_firmwarenetgear:r7300dstnetgear:r7300dst_firmwarenetgear:r7900netgear:r7900_firmwarenetgear:r8000netgear:r8000_firmware

Fraquezas (CWE)

CWE-352CWE-352

Referencias

http://kb.netgear.com/000036386/CVE-2016-582384(cve@mitre.org)

http://packetstormsecurity.com/files/155712/Netgear-R6400-Remote-Code-Execution.html(cve@mitre.org)

http://www.securityfocus.com/bid/94819(cve@mitre.org)

http://www.sj-vs.net/a-temporary-fix-for-cert-vu582384-cwe-77-on-netgear-r7000-and-r6400-routers/(cve@mitre.org)

https://kalypto.org/research/netgear-vulnerability-expanded/(cve@mitre.org)

https://www.exploit-db.com/exploits/40889/(cve@mitre.org)

https://www.exploit-db.com/exploits/41598/(cve@mitre.org)

https://www.kb.cert.org/vuls/id/582384(cve@mitre.org)

http://kb.netgear.com/000036386/CVE-2016-582384(af854a3a-2127-422b-91ae-364da2661108)

http://packetstormsecurity.com/files/155712/Netgear-R6400-Remote-Code-Execution.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/94819(af854a3a-2127-422b-91ae-364da2661108)

http://www.sj-vs.net/a-temporary-fix-for-cert-vu582384-cwe-77-on-netgear-r7000-and-r6400-routers/(af854a3a-2127-422b-91ae-364da2661108)

https://kalypto.org/research/netgear-vulnerability-expanded/(af854a3a-2127-422b-91ae-364da2661108)

https://www.exploit-db.com/exploits/40889/(af854a3a-2127-422b-91ae-364da2661108)

https://www.exploit-db.com/exploits/41598/(af854a3a-2127-422b-91ae-364da2661108)

https://www.kb.cert.org/vuls/id/582384(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6277(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.