CVE-2017-6334

NETGEAR DGN2200 Devices OS Command Injection Vulnerability

Dgn2200 Series Firmware

dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the host_name field of an HTTP POST request, a different vulnerability than CVE-2017-6077.

6. Mär 2017

Ausgewertete Quellen

• Hinweis
  http://www.securityfocus.com/bid/96463
• Hinweis
  https://www.exploit-db.com/exploits/41459/
• Hinweis
  https://www.exploit-db.com/exploits/41472/
• Hinweis
  https://www.exploit-db.com/exploits/42257/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6334
• CISA
  NETGEAR DGN2200 Devices OS Command Injection Vulnerability
• NVD
  CVE-2017-6334