critical9.8Known exploitedPublic exploit code
CVE-2017-6077
NETGEAR DGN2200 Remote Code Execution Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-07. Federal due date: 2022-09-07.
Apply updates per vendor instructions.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Netgear DGN2200v1/v2/v3/v4 - 'ping.cgi' Remote Command Execution2017-02-18 · webapps · hardware
Impact
ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping_IPAddr field of an HTTP POST request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Dgn2200 Firmware | through 10.0.0.50 |