CVE-2016-6277

No fix known ExploitedEPSS 100%CVSS 8.8

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.

Published 2016-12-14 · In CISA KEV since 2022-03-07 · CVE record · OSV

Products: netgear d6220_firmware, netgear d6400_firmware, netgear r6250_firmware, netgear r6400_firmware, netgear r6700_firmware, netgear r6900_firmware, netgear r7000_firmware, netgear r7100lg_firmware, netgear r7300dst_firmware, netgear r7900_firmware, netgear r8000_firmware