CVE-2017-6334VulnerabilityPublished 03/25/2022Updated 10/24/2026

CVE-2017-6334: NETGEAR DGN2200 Devices OS Command Injection Vulnerability

Affects NETGEAR DGN2200 DevicesSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/25/2022
KEV deadline: 04/15/2022
EPSS: 72.6% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

The impacted product is end-of-life and should be disconnected if still in use.

nvd.nist.gov/vuln/detail/CVE-2017-6334 (opens in a new tab)

Description

CVE-2017-6334 is a high severity OS command injection vulnerability affecting NETGEAR DGN2200 devices with firmware versions up to 10.0.0.50. The vulnerability exists in the dnslookup.cgi component and allows remote authenticated users to execute arbitrary operating system commands. This vulnerability has been exploited in the wild. No specific patch or remediation information is provided in the available data.

Summary

The vulnerability identified as CVE-2017-6334 affects NETGEAR DGN2200 devices running firmware through version 10.0.0.50. It is an OS command injection flaw in the dnslookup.cgi interface, permitting remote authenticated attackers to execute arbitrary OS commands on the device. This type of vulnerability is classified under CWE-78 (Improper Neutralization of Special Elements used in an OS Command). Exploitation requires authentication, but the vulnerability has been observed in active exploitation scenarios.

Impact

Successful exploitation allows remote authenticated users to execute arbitrary operating system commands on the affected NETGEAR DGN2200 devices. This can lead to full compromise of the device, unauthorized access, and potential disruption of network services. The vulnerability has been exploited in the wild, indicating active threat actor interest and real-world risk.

Mitigation

No official patch or remediation details are provided in the available information. Users should consult NETGEAR's official advisories or support channels for updates. Until a fix is confirmed, restricting access to the device management interface and enforcing strong authentication controls is recommended to reduce risk.

Weaknesses

CWE-78OS Command Injection (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:57:02 UTC

Weaknesses

References

Related threats