PT-2016-6697 · NetGear · D6220+11

Published 2016-12-14 · Updated 2025-01-22 · CVE-2016-582384

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NETGEAR R6250 versions 1.0.0 through 1.0.4.6.Beta NETGEAR R6400 versions 1.0.0 through 1.0.1.18.Beta NETGEAR R6700 versions 1.0.0 through 1.0.1.14.Beta NETGEAR R6900 version 1.0.0 NETGEAR R7000 versions 1.0.0 through 1.0.7.6.Beta NETGEAR R7100LG versions 1.0.0 through 1.0.0.28.Beta NETGEAR R7300DST versions 1.0.0 through 1.0.0.46.Beta NETGEAR R7900 versions 1.0.0 through 1.0.1.8.Beta NETGEAR R8000 versions 1.0.0 through 1.0.3.26.Beta NETGEAR D6220 version 1.0.0 NETGEAR D6400 version 1.0.0 NETGEAR D7000 version 1.0.0

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the path info to "cgi-bin/".

Recommendations For NETGEAR R6250 versions 1.0.0 through 1.0.4.6.Beta, update to version 1.0.4.6.Beta or later. For NETGEAR R6400 versions 1.0.0 through 1.0.1.18.Beta, update to version 1.0.1.18.Beta or later. For NETGEAR R6700 versions 1.0.0 through 1.0.1.14.Beta, update to version 1.0.1.14.Beta or later. For NETGEAR R6900 version 1.0.0, update to a newer version. For NETGEAR R7000 versions 1.0.0 through 1.0.7.6.Beta, update to version 1.0.7.6.Beta or later. For NETGEAR R7100LG versions 1.0.0 through 1.0.0.28.Beta, update to version 1.0.0.28.Beta or later. For NETGEAR R7300DST versions 1.0.0 through 1.0.0.46.Beta, update to version 1.0.0.46.Beta or later. For NETGEAR R7900 versions 1.0.0 through 1.0.1.8.Beta, update to version 1.0.1.8.Beta or later. For NETGEAR R8000 versions 1.0.0 through 1.0.3.26.Beta, update to version 1.0.3.26.Beta or later. For NETGEAR D6220 version 1.0.0, update to a newer version. For NETGEAR D6400 version 1.0.0, update to a newer version. For NETGEAR D7000 version 1.0.0, update to a newer version.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

BDU:2023-01043

CVE-2016-582384

Affected Products

D6220

D6400

D7000

R6250

R6400

R6700

R6900

R7000

R7100Lg

R7300Dst

R7900

R8000

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netgear_r7000_cgibin_exec.rb · Exploit
• https://bdu.fstec.ru/vul/2023-01043 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-582384 · Security Note
• https://t.me/cvenotify/108277 · Telegram Post
• https://kalypto.org/research/netgear-vulnerability-expanded · Note
• http://securityfocus.com/bid/94819 · Note
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note
• http://kb.netgear.com/000036386/CVE-2016-582384 · Note
• https://exploit-db.com/exploits/40889 · Note
• https://exploit-db.com/exploits/41598 · Note
• https://kb.cert.org/vuls/id/582384 · Note
• http://packetstormsecurity.com/files/155712/Netgear-R6400-Remote-Code-Execution.html · Note
• http://sj-vs.net/a-temporary-fix-for-cert-vu582384-cwe-77-on-netgear-r7000-and-r6400-routers · Note