Exploited Vulnerabilities DailyCVE-2016-1555: NETGEAR Wireless Access Point (WAP) Devices
EPSS98.2%No. 259 of 1739 in KEV
CVE year2016~6 yrs before listing
Same vendor in KEV8
Same product1
| Field | Value |
|---|---|
| Vendor | NETGEAR |
| Product | Wireless Access Point (WAP) Devices |
| Name | NETGEAR Multiple WAP Devices Command Injection Vulnerability |
| Added to KEV | 2022-03-25 |
| US federal due date | 2022-04-15 |
| Ransomware use | Unknown |
| CWE | CWE-77 |
CISA description
Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. Exploitation allows for arbitrary code execution.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A NETGEAR Wireless Access Point (WAP) Devices vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2022-03-25.