1. Home
  2. CVE Database
  3. CVE-2016-1556
HIGH · 7.5

CVE-2016-1556

Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0; and WND930 before 2.0.11 allows remote attackers to read the wireless WPS PIN or passphra...

Vulnerability Description

Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0; and WND930 before 2.0.11 allows remote attackers to read the wireless WPS PIN or passphrase by visiting unauthenticated webpages.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
NetgearWnap320 Firmware<= 3.0.5.0
NetgearWnap320-
NetgearWndap350 Firmware<= 3.0.5.0
NetgearWndap350-
NetgearWndap360 Firmware<= 3.0.5.0
NetgearWndap360-
NetgearWndap210V2 Firmware<= 3.0.5.0
NetgearWndap210V2-
NetgearWn604 Firmware<= 3.3.2
NetgearWn604-
NetgearWnd930 Firmware<= 2.0.4
NetgearWnd930-

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2016-1556?

CVE-2016-1556 is a vulnerability with a CVSS score of 7.5 (HIGH). Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0; and WND930 before 2.0.11 allows remote attackers to read the wireless WPS PIN or passphra...

How severe is CVE-2016-1556?

CVE-2016-1556 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-1556?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear Wnap320 Firmware, Netgear Wnap320, Netgear Wndap350 Firmware, Netgear Wndap350, Netgear Wndap360 Firmware.