CVE-2017-6077

CVE-2017-6077 is a critical-severity (CVSS 9.8) vulnerability in NETGEAR Wireless Router DGN2200. CISA added it to the Known Exploited Vulnerabilities catalog on March 7, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by September 7, 2022. CISA does not currently list it as used in ransomware campaigns. NETGEAR has 8 vulnerabilities in the KEV catalog, 0 of them linked to ransomware.

ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping_IPAddr field of an HTTP POST request.

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

• http://www.securityfocus.com/bid/96408
• https://www.exploit-db.com/exploits/41394/
• http://www.securityfocus.com/bid/96408
• https://www.exploit-db.com/exploits/41394/
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6077