CVE-2016-1555

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:netgear:wnap320_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wnap320:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:netgear:wndap350_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wndap350:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:netgear:wndap360_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wndap360:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:netgear:wndap210v2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wndap210v2:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:netgear:wn604_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wn604:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:netgear:wndap660_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wndap660:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:netgear:wn802tv2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:wn802tv2:-:*:*:*:*:*:*:*

Information

Published : 2017-04-21 15:59

Updated : 2019-04-16 18:00


NVD link : CVE-2016-1555

Mitre link : CVE-2016-1555


JSON object : View

Products Affected

netgear

  • wn604_firmware
  • wndap210v2_firmware
  • wndap360
  • wn604
  • wndap350_firmware
  • wndap660_firmware
  • wnap320
  • wnap320_firmware
  • wn802tv2
  • wndap350
  • wndap210v2
  • wn802tv2_firmware
  • wndap660
  • wndap360_firmware
CWE
CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')