Live › vulnerability › CVE-2016-1555
Go to dashboardMultiple NETGEAR wireless access point models pass web form input straight to their command-line interface without checks. An attacker who gets a victim to load a malicious web page can run arbitrary code on the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| NETGEAR Wireless Access Point (WAP) Devices | vendor | – | – |
Identify NETGEAR WAP models in your network inventory and compare firmware versions against NETGEAR's advisory; unknown which firmware builds are affected from these sources.
Apply the firmware updates NETGEAR publishes for your WAP model (CISA required action: apply updates per vendor instructions); unknown which exact version is fixed from these sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.
This page as .md · .json · in your agent: get_signal("CVE-2016-1555")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.