CVE-2016-10176

EPSS 77.6%◆ VulnCheck KEV

Vexday Risk Score

82Corregir ahora

Decisión SSVC (CISA)

Act

Explotación + impacto → acción inmediata

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 77.6%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Ciclo de vida

20 dic 2016Exploit Metasploit disponible

21 dic 2016PoC pública

30 ene 2017Publicada en NVD

Recomendación: Corregir cuanto antes — hay explotación activa confirmada.

The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the web server of the device. This special URL is handled by the embedded web server (uhttpd) and processed accordingly. The web server also contains another URL, apply_noauth.cgi, that allows an unauthenticated user to perform sensitive actions on the device. This functionality can be exploited to change the router settings (such as the answers to the password-recovery questions) and achieve remote code execution.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 2

cve_referencewww.exploit-db.com/exploits/40949/no verificado exploitdbwww.exploit-db.com/exploits/40949no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

http://kb.netgear.com/000036549/Insecure-Remote-Access-and-Command-Execution-Security-Vulnerability http://seclists.org/fulldisclosure/2016/Dec/72 https://raw.githubusercontent.com/pedrib/PoC/master/advisories/netgear-wnr2000.txt https://www.exploit-db.com/exploits/40949/http://www.securityfocus.com/bid/95867