CVE-2016-1555 in netgear wnap320 firmware
LogPulse has a published detection rule for this CVE: it raises a notable when someone tries to exploit it.
What the vulnerability is
(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.
Affected software: netgear wnap320 firmware, netgear wndap350 firmware, netgear wndap360 firmware, netgear wndap210v2 firmware, netgear wn604 firmware, netgear wndap660 firmware, netgear wn802tv2 firmware
Scores
- CVSS: 9.8 (critical)
- EPSS: 98.32% chance of exploitation in the next 30 days
- CISA KEV: Known exploited, listed 2022-03-25
- Published: 2017-04-21
What LogPulse has for it
- Detection rule: Yes, published
- Agent check (vulnerable version): No
- Mitigation: No
Source data: NIST NVD, CISA KEV and FIRST EPSS. LogPulse processes new CVEs every hour.
We build every detection with great care, but no two environments are the same. Log sources, parsing and configuration differ, so test a detection in your own environment before you rely on it.