Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

HTTP:NETGEAR:CVE-2016-1555-RCE

Severity

Major

Recommended

No

Recommended Action

Drop

Category

HTTP

Keywords

NetGear Devices CVE-2016-1555 Remote Code Execution

Release Date

2019/01/24

Update Number

3137

Supported Platforms

idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

HTTP: NetGear Devices CVE-2016-1555 Remote Code Execution


This signature detects attempts to exploit a known vulnerability against Netgear devices. A successful attack can lead to arbitrary code execution

Extended Description

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.

Affected Products

  • Netgear wn604_firmware 3.3.2
  • Netgear wn802tv2_firmware 3.0.5.0
  • Netgear wnap320_firmware 3.0.5.0
  • Netgear wndap210v2_firmware 3.0.5.0
  • Netgear wndap350_firmware 3.0.5.0
  • Netgear wndap360_firmware 3.0.5.0
  • Netgear wndap660_firmware 3.0.5.0

References

  • CVE: CVE-2016-1555
  • URL: http://seclists.org/fulldisclosure/2016/Feb/112

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out