---
id: "CVE-2016-1555"
kind: "vulnerability"
aliases: ["CVE-2016-1555"]
title: "NETGEAR Wireless Access Point (WAP) Devices: NETGEAR Multiple WAP Devices Command Injection Vulnerability"
severity: "critical"
cvss: 10.0
epss: 0.98288
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "NETGEAR Wireless Access Point (WAP) Devices", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "infrastructure", "netgear", "network-appliance", "self-hosted", "wireless-access-point"]
not_affected_if: ["firmware-updated", "unaffected-model"]
published_at: "2017-04-21T15:59:00+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-1555", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-1555", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-1555", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# NETGEAR Wireless Access Point (WAP) Devices: NETGEAR Multiple WAP Devices Command Injection Vulnerability

Multiple NETGEAR wireless access point models pass web form input straight to their command-line interface without checks. An attacker who gets a victim to load a malicious web page can run arbitrary code on the device.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:NETGEAR Wireless Access Point (WAP) Devices affected ? fixed ?

## How to check

Identify NETGEAR WAP models in your network inventory and compare firmware versions against NETGEAR's advisory; unknown which firmware builds are affected from these sources.

## Fix

Apply the firmware updates NETGEAR publishes for your WAP model (CISA required action: apply updates per vendor instructions); unknown which exact version is fixed from these sources.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-1555
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2016-1555
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2016-1555

## From the sources

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_