NETGEAR WNDAP210V2 Firmware vulnerabilities

2 CVEs affecting NETGEAR WNDAP210V2 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-1556, published 2017-04-21.

More from NETGEAR.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-1555: NETGEAR Multiple WAP Devices Command Injection Vulnerability, published 2017-04-21. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 98.3% chance of exploitation in the next 30 days. (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and…
• CVE-2016-1556, published 2017-04-21. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0; and WND930 before 2.0.11 allows remote attackers to read the wireless WPS PIN or…