CVE-2016-1555: Netgear wireless access point PHP scripts allow unauthenticated command injection

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 16 September 2026. Confidence: high.

critical priorityUnauthenticated remote command execution with a CVSS score of 9.8, confirmed exploitation in KEV and public exploit code.

What it is

Several PHP scripts (boardData102.php, boardData103.php, boardDataJP.php, boardDataNA.php, boardDataWW.php) in Netgear WN604 and multiple WNAP/WNDAP access points pass attacker input to a command shell without sanitisation. A remote, unauthenticated attacker can run arbitrary commands on the device. The flaw is rated critical and is listed in CISA's Known Exploited Vulnerabilities catalog.

Impact

An attacker gains arbitrary command execution with the privileges of the web server, allowing full compromise of the access point and any network it bridges.

Attack surface

Reachable over the network through the device web interface via the affected boardData PHP scripts; the CVSS vector shows no privileges and no user interaction required.

Exploitation

CISA added it to KEV on 2022-03-25 with a 2022-04-15 remediation due date, and public exploit code exists on Exploit-DB; EPSS 30-day probability is about 0.98.

What to do

• Apply the vendor firmware updates: WN604 3.3.3 or later and WNAP/WNDAP 3.5.5.0 or later.
• If patching is not possible, remove the devices from untrusted networks and restrict management access to a dedicated VLAN.
• Disable remote management and block internet exposure of the web interface.
• Replace end-of-life models that no longer receive firmware updates.
• Monitor vendor advisories for further updates on these product lines.

Detection

• Inspect web server and system logs for requests to boardData102.php, boardData103.php, boardDataJP.php, boardDataNA.php or boardDataWW.php.
• Alert on shell metacharacters or command strings in HTTP parameters sent to those scripts.
• Watch for unexpected outbound connections or new processes on the access point.
• Review network traffic to and from access point management interfaces for anomalous requests.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.