CVE-2017-6334
NETGEAR DGN2200 Devices
NETGEAR DGN2200 Devices OS Command Injection Vulnerability
What it is
dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands
What to do
The impacted product is end-of-life and should be disconnected if still in use.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other NETGEAR entries on the list
- Multiple Devices NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability CVE-2017-5521 · Sep 8, 2022
- Multiple Devices NETGEAR Multiple Devices Buffer Overflow Vulnerability CVE-2017-6862 · Jun 8, 2022
- Wireless Access Point (WAP) Devices NETGEAR Multiple WAP Devices Command Injection Vulnerability CVE-2016-1555 · Mar 25, 2022
- WNR2000v5 Router NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability CVE-2016-10174 · Mar 25, 2022
- Wireless Router DGN2200 NETGEAR DGN2200 Remote Code Execution Vulnerability CVE-2017-6077 · Mar 7, 2022
- Multiple Routers NETGEAR Multiple Routers Remote Code Execution Vulnerability CVE-2016-6277 · Mar 7, 2022