8.8high
CVE-2016-6277KEVin critical feed3 exploitsNuclei template
NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
8.8
v3.1 · CNA
CISA KEV
Yes
added 2022-03-07
EPSS
99.8%
percentile 100%
Public exploits
3
Metasploit · Exploit-DB · Nuclei check
Summary
NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.
Known exploited (CISA KEV)
- Added
- 4 y ago
- Due date
- 2022-09-07 (4 y ago)
- Ransomware use
- Unknown
- Required action
- Apply updates per vendor instructions.
- Vendor / product
- NETGEAR / Multiple Routers
- CISA name
- NETGEAR Multiple Routers Remote Code Execution Vulnerability
CISA SSVC assessment
- Exploitation
- Active — exploited in the wild
- Automatable
- no
- Technical impact
- total
- Assessed
- 21 mo ago
Exploit prediction (EPSS)
99.80% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.
Exploits and detections
- Nuclei template NETGEAR Routers - Remote Code Execution · nuclei detection template
- Metasploit exploit/linux/http/netgear_r7000_cgibin_exec Netgear R7000 and R6400 cgi-bin Command Injection · metasploit exploit, excellent rank · 2016-12-06
- EDB-41598 Netgear R7000 / R6400 - 'cgi-bin' Command Injection (Metasploit) · remote · 2017-03-13
- EDB-40889 Netgear R7000 - Command Injection · webapps · 2016-12-07
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CISA ADP | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
- CWE-352 Cross-Site Request Forgery
References
- exploit-db.com /exploits/40889/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
- exploit-db.com /exploits/41598/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
- kb.netgear.com /000036386/CVE-2016-582384 · x_refsource_CONFIRM, x_transferred
- sj-vs.net /a-temporary-fix-for-cert-vu582384-cwe-77-on-netgear-r7000-and-r6400-routers/ · x_refsource_MISC, x_transferred
- kb.cert.org /vuls/id/582384 · third-party-advisory, x_refsource_CERT-VN, x_transferred
- securityfocus.com /bid/94819 · vdb-entry, x_refsource_BID, x_transferred
- kalypto.org /research/netgear-vulnerability-expanded/ · x_refsource_MISC, x_transferred
- packetstormsecurity.com /files/155712/Netgear-R6400-Remote-Code-Execution.html · x_refsource_MISC, x_transferred
- cisa.gov /known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6277 · government-resource
Sources
- CVE List: CVE-2016-6277
- NVD: CVE-2016-6277
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.