CVE-2017-6077 — VulnIntel

CVE-2017-6077

CRITICAL

KEV

Exploit

ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping_IPAddr field of an HTTP POST request.

설명

Score Summary

CVSS Score: 9.8
Version: 3.1
VPI: 100
Why this VPI (explainable, experimental)
VPI breakdown
Impact 98.00
Exploitation signal(KEV listed) ×1.50
VPI 100.00
VPI formula vpi-v1
EPSS: 68.2%
(상위 99.3%)
Attack Vector: Network
Low Complexity
No Privileges
No User Interaction
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

Published: 02/22/2017(9 years ago)
Modified: 04/21/2026(3 months ago)
Source: KEV, NVD
Products: 2

CISA KEV Listing

Vendor / Project: NETGEAR
Product: Wireless Router DGN2200

Date Added: 03/07/2022
Due Date: 09/07/2022Overdue 1414d

Required Action

Apply updates per vendor instructions.

Vulnerability Lifecycle

NVDPublished02/22/2017
CISA KEVKEV Listed03/07/2022
CISA KEV

Score Comparison by Source

Source	CVSS Version	Base Score	Severity	Vector String	Assessment Date
NVDNIST	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	04/23/2026
NVDNIST	2.0	10.0

CWE Weakness Classification

CWE-78
NVD
Secondary

References (4)

NVD
Third Party Advisory
http://www.securityfocus.com/bid/96408
NVD
Exploit
https://www.exploit-db.com/exploits/41394/
NVD

Affected Products (2)

Impact	98.00
Exploitation signal(KEV listed)	×1.50
VPI	100.00