9.3

CVE-2016-6277

Warnung
Exploit

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netgear ≫ D6220 Firmware Version <= 1.0.0.22
   Netgear ≫ D6220 Version-
Netgear ≫ D6400 Firmware Version <= 1.0.0.56
   Netgear ≫ D6400 Version-
Netgear ≫ R6250 Firmware Version <= 1.0.4.6_10.1.12
   Netgear ≫ R6250 Version-
Netgear ≫ R6400 Firmware Version <= 1.0.1.18
   Netgear ≫ R6400 Version-
Netgear ≫ R6700 Firmware Version <= 1.0.1.14
   Netgear ≫ R6700 Version-
Netgear ≫ R6900 Firmware Version <= 1.0.1.14
   Netgear ≫ R6900 Version-
Netgear ≫ R7000 Firmware Version <= 1.0.7.2_1.1.93
   Netgear ≫ R7000 Version-
Netgear ≫ R7100lg Firmware Version <= 1.0.0.28
   Netgear ≫ R7100lg Version-
Netgear ≫ R7300dst Firmware Version <= 1.0.0.46
   Netgear ≫ R7300dst Version-
Netgear ≫ R7900 Firmware Version <= 1.0.1.8
   Netgear ≫ R7900 Version-
Netgear ≫ R8000 Firmware Version <= 1.0.3.26
   Netgear ≫ R8000 Version-

07.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

NETGEAR Multiple Routers Remote Code Execution Vulnerability

Schwachstelle

NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 94.28% 0.999
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

http://www.securityfocus.com/bid/94819
Third Party Advisory
Broken Link
VDB Entry
https://kalypto.org/research/netgear-vulnerability-expanded/
Third Party Advisory
Exploit
Broken Link
https://www.exploit-db.com/exploits/40889/
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/41598/
Third Party Advisory
Exploit
VDB Entry
https://www.kb.cert.org/vuls/id/582384
Third Party Advisory
US Government Resource