NETGEAR Multiple WAP Devices Command Injection Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 21, 2017 · Catalog

   Detected

   (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.

2. Mar 25, 2022 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Apr 15, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.

Affected

• cpe netgear/wn604 firmwareversion unspecified
• cpe netgear/wn802tv2 firmwareversion unspecified
• cpe netgear/wnap320 firmwareversion unspecified
• cpe netgear/wndap210v2 firmwareversion unspecified
• cpe netgear/wndap350 firmwareversion unspecified
• cpe netgear/wndap360 firmwareversion unspecified
• cpe netgear/wndap660 firmwareversion unspecified
• vendor NETGEAR Wireless Access Point (WAP) Devicesversion unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2016-1555

  Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. Exploitation allows for arbitrary code execution.

  cisa.gov
• CVE.orgVulnerability recordCVE-2016-1555

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2016-1555

  30-day exploitation probability 98.3%

  first.org
• Exploit DatabasePublic exploit reference45909

  Public archive entry. The exploit body is not stored here.

  exploit-db.com
• Metasploit ModulesPublic exploit moduleexploit_linux/http/netgear_unauth_exec

  Public module reference (excellent). Module source is not copied into this catalog.

  rapid7.com
• NIST NVDVulnerability recordCVE-2016-1555

  (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.

  nvd.nist.gov
• Packet Storm SecurityCited referencehttp://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html

  Packet Storm link already published on the finding.

  packetstormsecurity.com

References

• Third Party Advisory · packetstormsecurity.com
• Mailing List · seclists.org
• Patch · kb.netgear.com
• CISA note · nvd.nist.gov
• Exploit · exploit-db.com