---
id: "CVE-2017-6334"
kind: "vulnerability"
aliases: ["CVE-2017-6334"]
title: "NETGEAR DGN2200 Devices: NETGEAR DGN2200 Devices OS Command Injection Vulnerability"
severity: "critical"
cvss: 9.0
epss: 0.7264
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "NETGEAR DGN2200 Devices", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["dgn2200", "exploited", "home-router", "infrastructure", "netgear", "self-hosted"]
not_affected_if: ["firmware-newer-than-10.0.0.50", "not-dgn2200"]
published_at: "2017-03-06T02:59:00+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6334", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-6334", "first_seen_at": "2026-10-23T19:13:45+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-6334", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# NETGEAR DGN2200 Devices: NETGEAR DGN2200 Devices OS Command Injection Vulnerability

NETGEAR DGN2200 home routers have an OS command injection flaw in the dnslookup.cgi web page. An attacker who can log in to the router's admin interface can run arbitrary commands on the device.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:NETGEAR DGN2200 Devices affected ? fixed ?

## How to check

Identify any NETGEAR DGN2200 devices on the network and note their firmware version; the source says firmware through 10.0.0.50 is affected.

## Fix

The product is end-of-life; CISA says to disconnect it if still in use. Replace the device with a supported router.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6334
- 2026-10-23T19:13:45+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2017-6334
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2017-6334

## From the sources

dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the host_name field of an HTTP POST request, a different vulnerability than CVE-2017-6077.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_