NETGEAR · DGN2200 Devices
CVE-2017-6334
NETGEAR DGN2200 Devices OS Command Injection Vulnerability
What it is
dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the host_name field of an HTTP POST request, a different vulnerability than CVE-2017-6077.
CISA: dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands
What to do
The impacted product is end-of-life and should be disconnected if still in use.
Deadline for US federal agencies: April 15, 2022
More exploited flaws from NETGEAR
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 8, 2022 | Exposure of Sensitive Information | Multiple Devices | High 8.1 | 89% |
| Jun 8, 2022 | Buffer Overflow | Multiple Devices | Critical 9.8 | 46% |
| Mar 25, 2022 | Multiple WAP Devices Command Injection | Wireless Access Point (WAP) Devices | Critical 9.8 | 98% |
| Mar 25, 2022 | Buffer Overflow | WNR2000v5 Router | Critical 9.8 | 83% |
| Mar 7, 2022 | Remote Code Execution | Multiple Routers | High 8.8 | 99.8% |
| Mar 7, 2022 | DGN2200 Remote Code Execution | Wireless Router DGN2200 | Critical 9.8 | 69% |
| Nov 3, 2021 | Missing Function Level Access Control | JGS516PE Devices | Critical 9.8 | 57% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.