CVE-2017-6077

NETGEAR DGN2200 Remote Code Execution Vulnerability

Dgn2200 Firmware

ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping_IPAddr field of an HTTP POST request.

23. Feb 2017

Ausgewertete Quellen

• Hinweis
  http://www.securityfocus.com/bid/96408
• Hinweis
  https://www.exploit-db.com/exploits/41394/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6077
• CISA
  NETGEAR DGN2200 Remote Code Execution Vulnerability
• NVD
  CVE-2017-6077