CVE-2016-6277
NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.
- Score
- CVSS 3.1 8.8 High
- Status
- Analyzed - cve@mitre.org
- Published
- 2016-12-14
- Last modified
- 2025-10-21
- Known exploited (CISA KEV)
- since 2022-03-07, action due 2022-09-07: Apply updates per vendor instructions.
- Weaknesses
- CWE-352
Affected products
- D6220 Firmware (Netgear)
- D6400 Firmware (Netgear)
- R6250 Firmware (Netgear)
- R6400 Firmware (Netgear)
- R6700 Firmware (Netgear)
- R6900 Firmware (Netgear)
- R7000 Firmware (Netgear)
- R7100lg Firmware (Netgear)
- R7300dst Firmware (Netgear)
- R7900 Firmware (Netgear)
- R8000 Firmware (Netgear)
References
- http://kb.netgear.com/000036386/CVE-2016-582384
- http://packetstormsecurity.com/files/155712/Netgear-R6400-Remote-Code-Execution.html
- http://www.securityfocus.com/bid/94819
- http://www.sj-vs.net/a-temporary-fix-for-cert-vu582384-cwe-77-on-netgear-r7000-and-r6400-routers/
- https://kalypto.org/research/netgear-vulnerability-expanded/
- https://www.exploit-db.com/exploits/40889/
- https://www.exploit-db.com/exploits/41598/
- https://www.kb.cert.org/vuls/id/582384
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6277
