PT-2020-7983 · NetGear · Netgear Dgn2200V4

Published 2020-04-28 · Updated 2020-05-04 · CVE-2016-11054

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: NETGEAR DGN2200v4 versions prior to 2017-01-06

Description: The issue affects NETGEAR DGN2200v4 devices, allowing for command execution and exposing an FTP insecure root directory.

Recommendations: For versions prior to 2017-01-06, update the device to a version released after 2017-01-06 to resolve the issue.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2016-11054

Affected Products

Netgear Dgn2200V4

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-11054 · Security Note
• https://osv.dev/vulnerability/CVE-2016-11054 · Vendor Advisory
• https://kb.netgear.com/31245/DGN2200v4-Command-Execution-and-FTP-Insecure-Root-Directory-Security-Vulnerability · Vendor Advisory
• https://t.me/cibsecurity/11706 · Telegram Post