CVE-2016-1555

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.

• CWE-77
• CWE-77

• http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/Feb/112Mailing List, Third Party Advisory
• https://kb.netgear.com/30480/CVE-2016-1555-Notification?cid=wmt_netgear_organicPatch, Vendor Advisory
• https://www.exploit-db.com/exploits/45909/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/Feb/112Mailing List, Third Party Advisory
• https://kb.netgear.com/30480/CVE-2016-1555-Notification?cid=wmt_netgear_organicPatch, Vendor Advisory
• https://www.exploit-db.com/exploits/45909/Exploit, Third Party Advisory, VDB Entry
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1555US Government Resource

Published

Apr 21, 2017

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-1546The Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is …
• CVE-2016-1547An off-path attacker can cause a preemptible client associat…
• CVE-2016-1548An attacker can spoof a packet from a legitimate ntpd server…
• CVE-2016-1549A malicious authenticated peer can create arbitrarily-many e…
• CVE-2016-1550An exploitable vulnerability exists in the message authentic…
• CVE-2016-1551ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f4590048…
• CVE-2016-1556Information disclosure in Netgear WN604 before 3.3.3; WNAP21…
• CVE-2016-1557Netgear WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0 revea…
• CVE-2016-1558Buffer overflow in D-Link DAP-2310 2.06 and earlier, DAP-233…
• CVE-2016-1559D-Link DAP-1353 H/W vers. B1 3.15 and earlier, D-Link DAP-25…
• CVE-2016-1560ExaGrid appliances with firmware before 4.8 P26 have a defau…
• CVE-2016-1561ExaGrid appliances with firmware before 4.8 P26 have a defau…