Live › vulnerability › CVE-2017-6334
Go to dashboardNETGEAR DGN2200 home routers have an OS command injection flaw in the dnslookup.cgi web page. An attacker who can log in to the router's admin interface can run arbitrary commands on the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
The impacted product is end-of-life and should be disconnected if still in use.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| NETGEAR DGN2200 Devices | vendor | – | – |
Identify any NETGEAR DGN2200 devices on the network and note their firmware version; the source says firmware through 10.0.0.50 is affected.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the host_name field of an HTTP POST request, a different vulnerability than CVE-2017-6077.
This page as .md · .json · in your agent: get_signal("CVE-2017-6334")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.