CISA known exploited vulnerability

CVE-2016-1555

NETGEAR Multiple WAP Devices Command Injection Vulnerability

SOURCE FACT

NETGEAR · Wireless Access Point (WAP) Devices

Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. Exploitation allows for arbitrary code execution.

Required action

Apply updates per vendor instructions.

CISA notes

https://nvd.nist.gov/vuln/detail/CVE-2016-1555

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

CVE-2016-1555

NETGEAR · Wireless Access Point (WAP) Devices

Required action

CISA notes

Could this product be present?