CVE-2016-6277

🗓️ 14 Dec 2016 16:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 1069 Views

NETGEAR router models R6250, R6400, R6700, R6900, R7000, R7100LG, R7300DST, R7900, R8000, D6220, D6400, D7000 before specified versions allow remote command execution

Reporter	Title	Published	Views	Family All 28
0day.today	Netgear R7000 / R6400 cgi-bin Command Injection Exploit	12 Mar 201700:00	–	zdt
0day.today	Netgear R6400 - Remote Code Execution Exploit	17 Dec 201900:00	–	zdt
ATTACKERKB	CVE-2016-6277	14 Dec 201600:00	–	attackerkb
BDU FSTEC	The vulnerability of the embedded software of NETGEAR routers such as R6250, R6400, R6700, R6900, R7000, R7100LG, R7300DST, R7900, R8000, D6220, D6400, and D7000 lies in the insufficient verification of the authenticity of executed requests. This allows attackers to execute arbitrary commands.	6 Mar 202300:00	–	bdu_fstec
Circl	CVE-2016-6277	7 Dec 201600:00	–	circl
CISA KEV Catalog	NETGEAR Multiple Routers Remote Code Execution Vulnerability	7 Mar 202200:00	–	cisa_kev
CISA	CISA Adds 11 Known Exploited Vulnerabilities to Catalog	7 Mar 202200:00	–	cisa
CNVD	Arbitrary Command Injection Vulnerability in a Variety of Netgear Netgear Routers	9 Dec 201600:00	–	cnvd
Check Point Advisories	Netgear R7000 and R6400 cgi-bin Command Injection (CVE-2016-6277)	23 May 201700:00	–	checkpoint_advisories
Cvelist	CVE-2016-6277	14 Dec 201616:00	–	cvelist

NVD

Node

netgear d6220_firmwareRange≤1.0.0.22

AND

netgear d6220Match-

Node

netgear d6400_firmwareRange≤1.0.0.56

AND

netgear d6400Match-

Node

netgear r6250_firmwareRange≤1.0.4.6_10.1.12

AND

netgear r6250Match-

Node

netgear r6400_firmwareRange≤1.0.1.18

AND

netgear r6400Match-

Node

netgear r6700_firmwareRange≤1.0.1.14

AND

netgear r6700Match-

Node

netgear r6900_firmwareRange≤1.0.1.14

AND

netgear r6900Match-

Node

netgear r7000_firmwareRange≤1.0.7.2_1.1.93

AND

netgear r7000Match-

Node

netgear r7100lg_firmwareRange≤1.0.0.28

AND

netgear r7100lgMatch-

Node

netgear r7300dst_firmwareRange≤1.0.0.46

AND

netgear r7300dstMatch-

Node

netgear r7900_firmwareRange≤1.0.1.8

AND

netgear r7900Match-

Node

netgear r8000_firmwareRange≤1.0.3.26

AND

netgear r8000Match-

Source	Link
exploit-db	www.exploit-db.com/exploits/40889/
kb	www.kb.netgear.com/000036386/CVE-2016-582384
exploit-db	www.exploit-db.com/exploits/41598/
kb	www.kb.cert.org/vuls/id/582384
packetstormsecurity	www.packetstormsecurity.com/files/155712/Netgear-R6400-Remote-Code-Execution.html
kalypto	www.kalypto.org/research/netgear-vulnerability-expanded/
sj-vs	www.sj-vs.net/a-temporary-fix-for-cert-vu582384-cwe-77-on-netgear-r7000-and-r6400-routers/
securityfocus	www.securityfocus.com/bid/94819
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 00:50Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.8

CVSS 29.3

EPSS0.99781

SSVC