Vulnerability Details CVE-2016-1556
Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0; and WND930 before 2.0.11 allows remote attackers to read the wireless WPS PIN or passphrase by visiting unauthenticated webpages.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.4%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html
- http://seclists.org/fulldisclosure/2016/Feb/112
- https://kb.netgear.com/30481/CVE-2016-1556-Notification?cid=wmt_netgear_organic
- http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html
- http://seclists.org/fulldisclosure/2016/Feb/112
- https://kb.netgear.com/30481/CVE-2016-1556-Notification?cid=wmt_netgear_organic
Products affected by CVE-2016-1556
-
cpe:2.3:h:netgear:wn604:-
-
cpe:2.3:h:netgear:wnap320:-
-
cpe:2.3:h:netgear:wnd930:-
-
cpe:2.3:h:netgear:wndap210v2:-
-
cpe:2.3:h:netgear:wndap350:-
-
cpe:2.3:h:netgear:wndap360:-
-
cpe:2.3:o:netgear:wn604_firmware:3.3.2
-
cpe:2.3:o:netgear:wnap320_firmware:2.0
-
cpe:2.3:o:netgear:wnap320_firmware:2.0.3
-
cpe:2.3:o:netgear:wnap320_firmware:2.1.1
-
cpe:2.3:o:netgear:wnap320_firmware:2.1.5
-
cpe:2.3:o:netgear:wnap320_firmware:2.1.6
-
cpe:2.3:o:netgear:wnap320_firmware:3.0.0.7
-
cpe:2.3:o:netgear:wnap320_firmware:3.0.4.0
-
cpe:2.3:o:netgear:wnap320_firmware:3.0.5.0
-
cpe:2.3:o:netgear:wnd930_firmware:-
-
cpe:2.3:o:netgear:wnd930_firmware:2.0.4
-
cpe:2.3:o:netgear:wndap210v2_firmware:3.0.5.0
-
cpe:2.3:o:netgear:wndap350_firmware:3.0.5.0
-
cpe:2.3:o:netgear:wndap360_firmware:3.0.5.0