Remote Code Execution Vulnerability in NETGEAR Prosafe WC9500, WC7600, and WC7520 Devices

Remote Code Execution Vulnerability in NETGEAR Prosafe WC9500, WC7600, and WC7520 Devices

CVE-2016-11022 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NETGEAR Prosafe WC9500 5.1.0.17, WC7600 5.1.0.17, and WC7520 2.5.0.35 devices allow a remote attacker to execute code with root privileges via shell metacharacters in the reqMethod parameter to login_handler.php.

Learn more about our Web Application Penetration Testing UK.