Описание
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2016-1555
- https://kb.netgear.com/30480/CVE-2016-1555-Notification?cid=wmt_netgear_organic
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1555
- https://www.exploit-db.com/exploits/45909
- http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html
- http://seclists.org/fulldisclosure/2016/Feb/112
Связанные уязвимости
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.
Уязвимость сценариев boardData102.php, boardData103.php, boardDataJP.php, boardDataNA.php и boardDataWW.php программного обеспечения беспроводных точек доступа Netgear, позволяющая нарушителю выполнить произвольные команды