CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
NETGEAR DGN2200 dnslookup.cgi Remote Command Execution Vulnerability Analysis and Mitigation Guide (CVE-2017-6334)
[Affected Scope] NETGEAR DGN2200 devices running firmware versions up to and including 10.0.0.50
[Impact] Remote authenticated attackers can execute arbitrary OS commands with root privileges by injecting shell metacharacters into the host_name field of an HTTP POST request
[Mitigation] Apply the latest official firmware patch immediately, or disable remote management and restrict access to the admin interface
NETGEAR DGN2200 Router ping.cgi Remote Command Execution (RCE) Vulnerability Advisory (CVE-2017-6077)
[Affected Scope] NETGEAR DGN2200 wireless ADSL2+ modem router devices running firmware versions up to and including 10.0.0.50.
[Impact] Remote authenticated attackers can execute arbitrary OS commands with root privileges via shell metacharacters in the ping_IPAddr parameter of HTTP POST requests, leading to complete device compromise.
[Mitigation] Apply the latest official firmware updates from NETGEAR, disable remote management, and restrict access to the web administration interface.