CVE-2016-6277
HighActively exploited (CISA KEV)
Description
NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.
SeverityHigh
CVSS8.8
Exploit probability—
Product
NETGEAR Multiple Routers
PublishedDec 14, 2016
First seenDec 14, 2016
Added to KEVMar 7, 2022
Weakness typeCWE-352Cross-site request forgery (CSRF)
How to fix
CISA required action
Apply updates per vendor instructions.
CISA due date: Sep 7, 2022Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netgear d6220_firmware | v ≤ 1.0.0.22 | — |
| netgear d6400_firmware | v ≤ 1.0.0.56 | — |
| netgear r6250_firmware | v ≤ 1.0.4.6_10.1.12 | — |
| netgear r6400_firmware | v ≤ 1.0.1.18 | — |
| netgear r6700_firmware | v ≤ 1.0.1.14 | — |
| netgear r6900_firmware | v ≤ 1.0.1.14 | — |
| netgear r7000_firmware | v ≤ 1.0.7.2_1.1.93 | — |
| netgear r7100lg_firmware | v ≤ 1.0.0.28 | — |
| netgear r7300dst_firmware | v ≤ 1.0.0.46 | — |
| netgear r7900_firmware | v ≤ 1.0.1.8 | — |
| netgear r8000_firmware | v ≤ 1.0.3.26 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.