{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-03T12:09:32.652","vulnerabilities":[{"cve":{"id":"CVE-2016-1555","sourceIdentifier":"cret@cert.org","published":"2017-04-21T15:59:00.333","lastModified":"2026-06-17T00:42:09.427","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands."},{"lang":"es","value":"(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, y (5) boardDataWW.php en Netgear WN604 en versiones anteriores a 3.3.3 y WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360 y WNDAP660 en versiones anteriores a 3.5.5.0 permite a atacantes remotos ejecutar comandos arbitrarios."}],"affected":[{"source":"cret@cert.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-02-07T13:10:18.350058Z","id":"CVE-2016-1555","options":[{"exploitation":"active"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"cisaExploitAdd":"2022-03-25","cisaActionDue":"2022-04-15","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"NETGEAR Multiple WAP Devices Command Injection Vulnerability","weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-77"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:wnap320_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.5.0","matchCriteriaId":"CBCE4D2F-5A11-4043-8F3E-4C10D155A6ED"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:wnap320:-:*:*:*:*:*:*:*","matchCriteriaId":"5E2613E9-CAF9-4C04-85BC-E10BDF4B0E74"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:wndap350_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.5.0","matchCriteriaId":"CB422D25-D72D-445B-869D-4A5FBF285357"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:wndap350:-:*:*:*:*:*:*:*","matchCriteriaId":"C82A16C2-DC48-4792-A4C7-8AC43F84196D"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:wndap360_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.5.0","matchCriteriaId":"FA1E8F1E-AB78-4C4B-BE0B-AE17E4636077"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:wndap360:-:*:*:*:*:*:*:*","matchCriteriaId":"7975D6EC-1816-4D52-8C87-77C1B6404120"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:wndap210v2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.5.0","matchCriteriaId":"9801E95C-9464-4594-B4E8-6F227C597C27"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:wndap210v2:-:*:*:*:*:*:*:*","matchCriteriaId":"5D1AD5A1-5212-4C0A-88BB-F34314F9C037"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:wn604_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.2","matchCriteriaId":"8CA9CFC3-D7D5-4538-AA31-9C4504E5AFA7"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:wn604:-:*:*:*:*:*:*:*","matchCriteriaId":"CD31DCAA-BAA5-4463-9EA4-A7076A625407"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:wndap660_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.5.0","matchCriteriaId":"99E67C3D-8907-4A96-BBAA-128959DB3962"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:wndap660:-:*:*:*:*:*:*:*","matchCriteriaId":"58D2492E-0CDC-4242-9206-7F0453B11CBD"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netgear:wn802tv2_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.5.0","matchCriteriaId":"169F7661-BB39-4188-A26E-9791FCE1DA6B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:netgear:wn802tv2:-:*:*:*:*:*:*:*","matchCriteriaId":"05B05670-CC01-4F53-B1A7-83FE3AFBA12E"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html","source":"cret@cert.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Feb/112","source":"cret@cert.org","tags":["Mailing List","Third Party Advisory"]},{"url":"https://kb.netgear.com/30480/CVE-2016-1555-Notification?cid=wmt_netgear_organic","source":"cret@cert.org","tags":["Patch","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/45909/","source":"cret@cert.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2016/Feb/112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://kb.netgear.com/30480/CVE-2016-1555-Notification?cid=wmt_netgear_organic","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/45909/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1555","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"]}]}}]}