Skip to content

CVE-2016-6277 NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1...

HighCVSS 8.8 EPSS 99.8% CISA KEV added 2022-03-07 · due 2022-09-07 Exploited in the wild Framework module Public exploit
Published
Updated
Exploit status
Exploited in the wild (confirmed)
Sign in for asset impact Search another CVE

Description

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.

CISA Known Exploited Vulnerability

Date added
2022-03-07
Due date (FCEB)
2022-09-07
Ransomware use
Unknown

Required action

Apply updates per vendor instructions.

Affected products

ProductAffected versionsFixed in
netgear d6220 firmware <= 1.0.0.22 No fix listed
netgear d6400 firmware <= 1.0.0.56 No fix listed
netgear r6250 firmware <= 1.0.4.6_10.1.12 No fix listed
netgear r6400 firmware <= 1.0.1.18 No fix listed
netgear r6700 firmware <= 1.0.1.14 No fix listed
netgear r6900 firmware <= 1.0.1.14 No fix listed
netgear r7000 firmware <= 1.0.7.2_1.1.93 No fix listed
netgear r7100lg firmware <= 1.0.0.28 No fix listed
netgear r7300dst firmware <= 1.0.0.46 No fix listed
netgear r7900 firmware <= 1.0.1.8 No fix listed
netgear r8000 firmware <= 1.0.3.26 No fix listed

References