[ CVE-2017-6077 · Published 22 Feb 2017 ]

NETGEAR DGN2200 Remote Code Execution Vulnerability

Exploited · CISA KEV CVSS 9.8 EPSS 69%No fix listed yet

[ Why it matters ]Priority signals

Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-03-07
EPSS: 69% chance of exploitation in the next 30 days (higher than 99% of CVEs)
Critical severity: CVSS 9.8

[ Description ]Official description

ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping_IPAddr field of an HTTP POST request.

CISA: NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 7 Sep 2022): Apply updates per vendor instructions.

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

www.securityfocus.com/bid/96408Broken LinkThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/41394ExploitThird Party AdvisoryVDB Entry
www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource