CVE

Id
93097  
CVE No.
CVE-2016-6277  
Status
Candidate  
Description
NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.  
Phase
Assigned (20160722)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792577 93097 CVE-2016-6277 EXPLOIT-DB:40889  View
792578 93097 CVE-2016-6277 URL:https://www.exploit-db.com/exploits/40889/  View
792579 93097 CVE-2016-6277 MISC:http://www.sj-vs.net/a-temporary-fix-for-cert-vu582384-cwe-77-on-netgear-r7000-and-r6400-routers/  View
792580 93097 CVE-2016-6277 MISC:https://kalypto.org/research/netgear-vulnerability-expanded/  View
792581 93097 CVE-2016-6277 CONFIRM:http://kb.netgear.com/000036386/CVE-2016-582384  View
792582 93097 CVE-2016-6277 CERT-VN:VU#582384  View
792583 93097 CVE-2016-6277 URL:https://www.kb.cert.org/vuls/id/582384  View
792584 93097 CVE-2016-6277 BID:94819  View

Related JVN