CVE-2016-11022

PoC ×2—

CVSS 3.1

7.2 high

EPSS

3%p87

Published

Mar 23, 2020 (Mar 23, 2020)

Modified

Jun 17, 2026

Description

NETGEAR Prosafe WC9500 5.1.0.17, WC7600 5.1.0.17, and WC7520 2.5.0.35 devices allow a remote attacker to execute code with root privileges via shell metacharacters in the reqMethod parameter to login_handler.php.

Vendors: netgear
Products: prosafe wc9500 firmware, prosafe wc7600 firmware, prosafe wc7520 firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.2%)

In the news0 stories

No ingested article mentions this CVE yet.