CVE-2017-6077: NETGEAR DGN2200 Remote Code Execution Vulnerability
ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the pingIPAddr field of an HTTP POST request.
Other sources
NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.
— CISA
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6077?
CVE-2017-6077 has been classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2017-6077?
To mitigate CVE-2017-6077, users should upgrade their NETGEAR DGN2200 firmware to the latest version beyond 10.0.0.50.
Who is affected by CVE-2017-6077?
CVE-2017-6077 affects NETGEAR DGN2200 devices running firmware versions up to 10.0.0.50.
What type of vulnerability is CVE-2017-6077?
CVE-2017-6077 is a command injection vulnerability that allows remote authenticated users to execute arbitrary OS commands.
What devices are impacted by CVE-2017-6077?
The impacted devices include NETGEAR Wireless Router DGN2200 models, particularly those with firmware versions up to 10.0.0.50.