CVE-2016-6277

nvd.nist.gov • August 18, 2026

NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before 1.0.0.46.Beta, R7900 before 1.0.1.8.Beta, R8000 before 1.0.3.26.Beta, D6220, D6400, D7000, and possibly other routers allow remote attackers to execute arbitrary commands via shell metacharacters in the path info to cgi-bin/.

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Enable Remote Command Execution on Vulnerable Routers and Servers Two critical vulnerabilities have been identified that allow remote attackers to execute arbitrary commands. CVE-2016-6277 affects various NETGEAR routers, including R6250, R6400, and R7000, allowing exploitation through shell metacharacters in the path info to cgi-bin. CVE-2007-3010 impacts Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier, enabling similar command execution via the user parameter during a ping action. Both vulnerabilities have been added to the CISA Known Exploited Vulnerabilities Catalog, indicating active exploitation. Users of the affected systems are advised to consult the CISA guidance for remediation steps. The vulnerabilities pose significant risks to network security and operational integrity. 73

Extracted Entities

CVE-2016-6277

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

IP Addresses (8)

MITRE ATT&CK (1)