CVE-2016-11022

7.2HIGH

Key Information:

Vendor
Netgear
Status
Prosafe Wc9500 Firmware
Vendor
CVE Published:
23 March 2020

Summary

NETGEAR Prosafe WC9500 5.1.0.17, WC7600 5.1.0.17, and WC7520 2.5.0.35 devices allow a remote attacker to execute code with root privileges via shell metacharacters in the reqMethod parameter to login_handler.php.

References

https://unit42.paloaltonetworks.com/new-mirai-variant-tar...
x_refsource_MISC
http://firmware.re/vulns/acsa-2015-002.php
x_refsource_MISC
https://github.com/threat9/routersploit/blob/master/route...
x_refsource_MISC

EPSS Score

8% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.