PT-2017-4247 · NetGear · Netgear Dgn2200

Sivertpl + 1 · Published 2017-02-22 · Updated 2025-01-22 · CVE-2017-6334

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NETGEAR DGN2200 devices with firmware through 10.0.0.50

Description The issue exists due to the lack of neutralization of special elements used in the operating system command. This can be exploited by a remote attacker to execute arbitrary OS commands on the router and gain full control over the device by using metacharacters in the ping IPAddr parameter of a POST request or the host name field of an HTTP POST request in dnslookup.cgi.

Recommendations For NETGEAR DGN2200 devices with firmware through 10.0.0.50, consider restricting access to the dnslookup.cgi and ping.cgi scripts until a patch is available. As a temporary workaround, avoid using the host name field in the dnslookup.cgi HTTP POST request and the ping IPAddr parameter in the ping.cgi POST request until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2023-02947

CVE-2017-6334

Affected Products

Netgear Dgn2200

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netgear_dnslookup_cmd_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/42257 · Exploit
• 🔥 https://exploit-db.com/exploits/41472 · Exploit
• 🔥 https://exploit-db.com/exploits/41459 · Exploit
• https://osv.dev/vulnerability/CVE-2017-6334 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6334 · Security Note
• https://bdu.fstec.ru/vul/2023-02947 · Security Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6334 · Note
• http://securityfocus.com/bid/96463 · Note
• https://t.me/cvenotify/108280 · Telegram Post
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note