NETGEAR · Wireless Access Point (WAP) Devices
CVE-2016-1555
NETGEAR Multiple WAP Devices Command Injection Vulnerability
무엇인가
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.
CISA: Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. Exploitation allows for arbitrary code execution.
할 일
Apply updates per vendor instructions.
미국 연방 기관 조치 기한: 2022년 4월 15일
NETGEAR의 다른 악용된 결함
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2022. 9. 8. | Exposure of Sensitive Information | Multiple Devices | 높음 8.1 | 89% |
| 2022. 6. 8. | Buffer Overflow | Multiple Devices | 치명적 9.8 | 46% |
| 2022. 3. 25. | OS Command Injection | DGN2200 Devices | 높음 8.8 | 73% |
| 2022. 3. 25. | Buffer Overflow | WNR2000v5 Router | 치명적 9.8 | 83% |
| 2022. 3. 7. | Remote Code Execution | Multiple Routers | 높음 8.8 | 99.8% |
| 2022. 3. 7. | DGN2200 Remote Code Execution | Wireless Router DGN2200 | 치명적 9.8 | 69% |
| 2021. 11. 3. | Missing Function Level Access Control | JGS516PE Devices | 치명적 9.8 | 57% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.