CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-03-06
NETGEAR DGN2200 dnslookup.cgi Remote Command Execution Vulnerability Analysis and Mitigation Guide (CVE-2017-6334)
[Affected Scope] NETGEAR DGN2200 devices running firmware versions up to and including 10.0.0.50
[Impact] Remote authenticated attackers can execute arbitrary OS commands with root privileges by injecting shell metacharacters into the host_name field of an HTTP POST request
[Mitigation] Apply the latest official firmware patch immediately, or disable remote management and restrict access to the admin interface