CVE-2016-11022 : NETGEAR Prosafe WC9500 5.1.0.17, WC7600 5.1.0.17, and WC7520 2.5.0.35 devices al

NETGEAR Prosafe WC9500 5.1.0.17, WC7600 5.1.0.17, and WC7520 2.5.0.35 devices allow a remote attacker to execute code with root privileges via shell metacharacters in the reqMethod parameter to login_handler.php.

Published 2020-03-23 15:15:15

Updated 2020-03-25 18:31:38

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2016-11022

Netgear » Prosafe Wc9500 Firmware » Version: 5.1.0.17
cpe:2.3:o:netgear:prosafe_wc9500_firmware:5.1.0.17:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Prosafe Wc9500 » Version: N/A
Netgear » Prosafe Wc7600 Firmware » Version: 5.1.0.17
cpe:2.3:o:netgear:prosafe_wc7600_firmware:5.1.0.17:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Prosafe Wc7600 » Version: N/A
Netgear » Prosafe Wc7520 Firmware » Version: 2.5.0.35
cpe:2.3:o:netgear:prosafe_wc7520_firmware:2.5.0.35:*:*:*:*:*:*:*
Matching versions
When used together with: Netgear » Prosafe Wc7520 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2016-11022

EPSS FAQ

8.36%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 94 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-11022

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P	8.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
7.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	1.2	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2016-11022

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-11022

https://github.com/threat9/routersploit/blob/master/routersploit/modules/exploits/routers/netgear/prosafe_rce.py

routersploit/prosafe_rce.py at master · threat9/routersploit · GitHub
Exploit;Third Party Advisory
https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/

New Mirai Variant Targets Enterprise Wireless Presentation & Display Systems
Third Party Advisory

CVEs referencing this url
http://firmware.re/vulns/acsa-2015-002.php

firmware · ǝɹ - Free Online Firmware Unpacker, Scanner, Analyser - Firmware Genomics/Genome Project - Firmware Vulnerability and Backdoor Discovery - Firmware Mounting, Modification, Loading and Emula
Exploit;Third Party Advisory

Jump to

Vulnerability Details : CVE-2016-11022

Products affected by CVE-2016-11022

Exploit prediction scoring system (EPSS) score for CVE-2016-11022

CVSS scores for CVE-2016-11022

CWE ids for CVE-2016-11022

References for CVE-2016-11022