Exploited Vulnerabilities DailyCVE-2016-6277: NETGEAR Multiple Routers
EPSS99.8%No. 150 of 1739 in KEV
CVE year2016~6 yrs before listing
Same vendor in KEV8
Same product1
| Field | Value |
|---|---|
| Vendor | NETGEAR |
| Product | Multiple Routers |
| Name | NETGEAR Multiple Routers Remote Code Execution Vulnerability |
| Added to KEV | 2022-03-07 |
| US federal due date | 2022-09-07 |
| Ransomware use | Unknown |
| CWE | CWE-352 |
CISA description
NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A NETGEAR Multiple Routers vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2022-03-07.