CVE-2016-6277

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.

• CWE-352
• CWE-352

• http://kb.netgear.com/000036386/CVE-2016-582384Patch, Vendor Advisory
• http://packetstormsecurity.com/files/155712/Netgear-R6400-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/94819Broken Link, Third Party Advisory, VDB Entry
• http://www.sj-vs.net/a-temporary-fix-for-cert-vu582384-cwe-77-on-netgear-r7000-and-r6400-routers/Broken Link, Mitigation, Third Party Advisory
• https://kalypto.org/research/netgear-vulnerability-expanded/Broken Link, Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/40889/Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/41598/Exploit, Third Party Advisory, VDB Entry
• https://www.kb.cert.org/vuls/id/582384Third Party Advisory, US Government Resource
• http://kb.netgear.com/000036386/CVE-2016-582384Patch, Vendor Advisory
• http://packetstormsecurity.com/files/155712/Netgear-R6400-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/94819Broken Link, Third Party Advisory, VDB Entry
• http://www.sj-vs.net/a-temporary-fix-for-cert-vu582384-cwe-77-on-netgear-r7000-and-r6400-routers/Broken Link, Mitigation, Third Party Advisory
• https://kalypto.org/research/netgear-vulnerability-expanded/Broken Link, Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/40889/Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/41598/Exploit, Third Party Advisory, VDB Entry
• https://www.kb.cert.org/vuls/id/582384Third Party Advisory, US Government Resource
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6277US Government Resource

Published

Dec 14, 2016

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6269Multiple directory traversal vulnerabilities in Trend Micro …9.1
• CVE-2016-6270The handle_certificate function in /vmi/manager/engine/manag…8.8
• CVE-2016-6271The Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows m…
• CVE-2016-6272XPath injection vulnerability in Epic MyChart allows remote …
• CVE-2016-6273The lmadmin component in Flexera FlexNet Publisher (aka Flex…
• CVE-2016-6276Citrix Linux Virtual Delivery Agent (aka VDA, formerly Linux…
• CVE-2016-6283Cross-site scripting (XSS) vulnerability in Atlassian Conflu…
• CVE-2016-6285Cross-site scripting (XSS) vulnerability in includes/decorat…
• CVE-2016-6286The "spiffy-cgi-handlers" egg would convert a nonexistent "P…
• CVE-2016-6287The "http-client" egg always used a HTTP_PROXY environment v…
• CVE-2016-6288The php_url_parse_ex function in ext/standard/url.c in PHP b…
• CVE-2016-6289Integer overflow in the virtual_file_ex function in TSRM/tsr…