CVE-2016-6277

NETGEAR R6250 1.0.4.6.Beta, R6400 1.0.1.18.Beta, R6700 oldin 1.0.1.14.Beta, R6900, R7000 1.0.7.6.Beta, R7100LG R1.0.7.6.Beta, R7100LG oldin 1.03000. 1.0.0.46.Beta, 1.0.1.8.Beta-dan oldin R7900, 1.0.3.26-dan oldin R8000.Beta, D6220, D6400, D7000 va ehtimol boshqa marshrutizatorlar masofaviy tajovuzkorlarga shell-pathbininfo/gi metacharaclar orqali o'zboshimchalik bilan buyruqlarni bajarishga imkon beradi.

CVSS Vector

Manbalar

• http://kb.netgear.com/000036386/CVE-2016-582384
• http://packetstormsecurity.com/files/155712/Netgear-R6400-Remote-Code-Execution.html
• http://www.securityfocus.com/bid/94819
• http://www.sj-vs.net/a-temporary-fix-for-cert-vu582384-cwe-77-on-netgear-r7000-and-r6400-routers/
• https://kalypto.org/research/netgear-vulnerability-expanded/