---
id: "CVE-2017-6077"
kind: "vulnerability"
aliases: ["CVE-2017-6077"]
title: "NETGEAR Wireless Router DGN2200: NETGEAR DGN2200 Remote Code Execution Vulnerability"
severity: "critical"
cvss: 10.0
epss: 0.68712
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "NETGEAR Wireless Router DGN2200", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["dgn2200", "exploited", "home-router", "infrastructure", "netgear", "self-hosted"]
not_affected_if: ["other-router-model"]
published_at: "2017-02-22T23:59:00+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6077", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-6077", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-6077", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# NETGEAR Wireless Router DGN2200: NETGEAR DGN2200 Remote Code Execution Vulnerability

NETGEAR DGN2200 wireless routers contain a flaw that allows remote code execution on the device. An attacker who can reach the router can run commands on it, which typically gives control of the home or office network it serves.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:NETGEAR Wireless Router DGN2200 affected ? fixed ?

## How to check

Check the router model and firmware version on the admin page or with the label on the device; unknown whether the sources list affected firmware builds.

## Fix

Apply the firmware update from NETGEAR per vendor instructions (CISA required action); unknown which exact build is fixed.
Replace the device if no fixed firmware is available.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6077
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2017-6077
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2017-6077

## From the sources

ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping_IPAddr field of an HTTP POST request.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_