CVE-2017-6077 is a critical remote command execution vulnerability affecting NETGEAR DGN2200 routers with firmware through 10.0.0.50. It allows authenticated attackers to execute arbitrary operating system commands by injecting shell metacharacters into the ping_IPAddr field of an HTTP POST request to ping.cgi. This vulnerability has a CVSS score of 9.8 (Critical) due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. It is actively exploited in the wild, with exploit code publicly available on ExploitDB, and has garnered significant community discussion and media coverage, including its use by malware like BotenaGo and Mirai variants.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 10.0.0.50CPE matchmatch criteria | cpe:2.3:o:netgear:dgn2200_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.