CVEvulnerability

CVE-2016-6277

8.8 HIGH Known exploited Published 2016-12-14 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

NETGEAR Multiple Routers Remote Code Execution Vulnerability — NETGEAR Multiple Routers

NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.

Added to KEV
2022-03-07
Remediation due
2022-09-07
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2016-6277
Status
Analyzed
Published
2016-12-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-352

Description

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.

Affected configurations

• netgear d6220 firmware (<= 1.0.0.22) • netgear d6400 firmware (<= 1.0.0.56) • netgear r6250 firmware (<= 1.0.4.6 10.1.12) • netgear r6400 firmware (<= 1.0.1.18) • netgear r6700 firmware (<= 1.0.1.14) • netgear r6900 firmware (<= 1.0.1.14) • netgear r7000 firmware (<= 1.0.7.2 1.1.93) • netgear r7100lg firmware (<= 1.0.0.28) • netgear r7300dst firmware (<= 1.0.0.46) • netgear r7900 firmware (<= 1.0.1.8) • netgear r8000 firmware (<= 1.0.3.26)

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References