CVE-2017-6334highunder attackCWE-78

CVE-2017-6334

Published · Updated

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 8.8epss 73%
from disclosure to weapon0 days
Published on NVDMar 6
1st PoCFeb 25
metasploitFeb 25
CISA KEV+1845d
exploitation probability
73%top 1% of all CVEs
observed exploitation
yesCISA + VulnCheck
6 public exploit(s)
Action required by CISAfederal deadline: 2022-04-15

The impacted product is end-of-life and should be disconnected if still in use.

In short

A web interface on NETGEAR DGN2200 routers allows authenticated users to run arbitrary commands on the device by injecting shell commands through a DNS lookup form. An attacker with router access can take complete control of the device.

Technical detail

CWE-78 OS Command Injection in dnslookup.cgi POST parameter 'host_name' allows authenticated remote code execution via unvalidated shell metacharacters. Requires prior authentication to the router web interface; successful exploitation grants arbitrary command execution with router privileges.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the host_name field of an HTTP POST request, a different vulnerability than CVE-2017-6077.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
public PoCs found — 6✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/42257exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/41459exploitdbwww.exploit-db.com/exploits/41472unverifiedcve_referencewww.exploit-db.com/exploits/41459/unverifiedcve_referencewww.exploit-db.com/exploits/41472/unverifiedcve_referencewww.exploit-db.com/exploits/42257/unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6334https://www.exploit-db.com/exploits/41459/https://www.exploit-db.com/exploits/41472/https://www.exploit-db.com/exploits/42257/http://www.securityfocus.com/bid/96463