{"id":"CVE-2016-1555","aliases":["EUVD-2016-2650","GHSA-rfrg-rcwf-93m5"],"status":"published","title":"(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5)...","description":"(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.98325,"percentile":0.99917,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-77"],"published":"2017-04-21T15:00:00Z","modified":"2026-06-17T00:42:09Z","kev":{"date_added":"2022-03-25","due_date":"2022-04-15","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-03-25"},{"source":"kev","since":"2022-03-25"}],"exploits":[{"source":"metasploit","id":"exploit/linux/http/netgear_unauth_exec","title":"Netgear Devices Unauthenticated Remote Command Execution","type":"exploit","platform":"Linux","date":"2016-02-25","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/netgear_unauth_exec"},{"source":"pocgithub","id":"ide0x90/cve-2016-1555","title":"ide0x90/cve-2016-1555","date":"2018-10-06","url":"https://github.com/ide0x90/cve-2016-1555"},{"source":"exploitdb","id":"EDB-45909","title":"Netgear Devices - (Unauthenticated) Remote Command Execution (Metasploit)","type":"remote","platform":"hardware","date":"2018-11-27","verified":true,"url":"https://www.exploit-db.com/exploits/45909"},{"source":"nuclei","id":"CVE-2016-1555","title":"NETGEAR WNAP320 Access Point Firmware - Remote Command Injection","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1555.yaml"}],"products":[{"vendor":"netgear","product":"wireless access point (wap) devices"},{"vendor":"netgear","product":"wn604_firmware"},{"vendor":"netgear","product":"wn802tv2_firmware"},{"vendor":"netgear","product":"wnap320_firmware"},{"vendor":"netgear","product":"wndap210v2_firmware"},{"vendor":"netgear","product":"wndap350_firmware"},{"vendor":"netgear","product":"wndap360_firmware"},{"vendor":"netgear","product":"wndap660_firmware"}],"references":[{"url":"https://kb.netgear.com/30480/CVE-2016-1555-Notification?cid=wmt_netgear_organic","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/45909/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Feb/112","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1555","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1555"},{"url":"https://www.exploit-db.com/exploits/45909"},{"url":"https://github.com/advisories/GHSA-rfrg-rcwf-93m5"}],"sources":{"cve":[{"id":"CVE-2016-1555","description":"(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.","status":"published","published":"2017-04-21T15:00:00Z","modified":"2025-10-21T23:55:42.264Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:33:35.841056Z"}],"euvd":[{"id":"EUVD-2016-2650","description":"(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.","status":"published","published":"2017-04-21T15:00:00Z","modified":"2025-10-21T23:55:42Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2022-03-25","updated_at":"2026-11-02T19:49:39.684828Z"}],"ghsa":[{"id":"GHSA-rfrg-rcwf-93m5","title":"(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5)...","description":"(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.","status":"published","published":"2022-05-14T01:09:51Z","modified":"2025-10-22T00:31:21Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T15:04:03.556367Z"}],"kev":[{"id":"CVE-2016-1555","title":"NETGEAR Multiple WAP Devices Command Injection Vulnerability","description":"Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. Exploitation allows for arbitrary code execution.","cwes":["CWE-77"],"kev":{"date_added":"2022-03-25","due_date":"2022-04-15","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2016-1555","description":"(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.","status":"published","published":"2017-04-21T15:59:00.333Z","modified":"2026-06-17T00:42:09.427Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:03:37.619685Z"}]}}