CVE-2016-1557
9.8
CRITICAL · CVSS 3.0 · EPSS 2.8% (pctl 86)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
Netgear WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0 reveal wireless passwords and administrative usernames and passwords over SNMP.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 2.84% — more likely to be exploited than 86% of all CVEs |
| Weakness | CWE-200 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2017-04-21 |
| Last modified | 2026-06-17 |
Affected (6)
| Vendor | Product |
|---|---|
| netgear | wnap320 |
| netgear | wnap320 firmware |
| netgear | wndap350 |
| netgear | wndap350 firmware |
| netgear | wndap360 |
| netgear | wndap360 firmware |
References
- http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html
- http://seclists.org/fulldisclosure/2016/Feb/112
- https://kb.netgear.com/30482/CVE-2016-1557-Notification?cid=wmt_netgear_organic
- http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html
- http://seclists.org/fulldisclosure/2016/Feb/112
- https://kb.netgear.com/30482/CVE-2016-1557-Notification?cid=wmt_netgear_organic
→ the Explorer · watch your stack · NVD