CVE-2016-6277

HIGH KEV NUCLEI

NETGEAR - RCE

Title source: llm

Description

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.

Exploits (3)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotecgi

https://www.exploit-db.com/exploits/41598

View Code ZIP pw:eip

exploitdb WORKING POC VERIFIED

by Acew0rm · textwebappscgi

https://www.exploit-db.com/exploits/40889

View Code ZIP pw:eip

metasploit WORKING POC EXCELLENT

by thecarterb, Acew0rm · rubypoclinux

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netgear_r7000_cgibin_exec.rb

View Code ZIP pw:eip

Nuclei Templates (1)

NETGEAR Routers - Remote Code Execution

HIGHby pikpikcu

References (9)

[Patch, Vendor Advisory] http://kb.netgear.com/000036386/CVE-2016-582384

[Exploit, Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/155712/Netgear-R6400-Remote-Code-Execution.html

[Broken Link, Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/94819

[Broken Link, Mitigation, Third Party Advisory] http://www.sj-vs.net/a-temporary-fix-for-cert-vu582384-cwe-77-on-netgear-r7000-and-r6400-routers/

[Broken Link, Exploit, Third Party Advisory] https://kalypto.org/research/netgear-vulnerability-expanded/

[Third Party Advisory, VDB Entry] https://www.exploit-db.com/exploits/40889/

[Exploit, Third Party Advisory, VDB Entry] https://www.exploit-db.com/exploits/41598/

[Third Party Advisory, US Government Resource] https://www.kb.cert.org/vuls/id/582384

[Third Party Advisory, US Government Resource] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6277

Scores

CVSS v3 8.8

EPSS 0.9433

EPSS Percentile 100.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CISA KEV 2022-03-07

VulnCheck KEV 2018-03-01

InTheWild.io 2022-03-07

ENISA EUVD EUVD-2016-7207

CWE

CWE-352

Status published

Products (11)

netgear/d6220_firmware < 1.0.0.22

netgear/d6400_firmware < 1.0.0.56

netgear/r6250_firmware < 1.0.4.6_10.1.12

netgear/r6400_firmware < 1.0.1.18

netgear/r6700_firmware < 1.0.1.14

netgear/r6900_firmware < 1.0.1.14

netgear/r7000_firmware < 1.0.7.2_1.1.93

netgear/r7100lg_firmware < 1.0.0.28

netgear/r7300dst_firmware < 1.0.0.46

netgear/r7900_firmware < 1.0.1.8

... and 1 more

Published Dec 14, 2016

KEV Added Mar 07, 2022

Tracked Since Feb 18, 2026