NVD

Id
82609  
Name
CVE-2017-6077  
Description
ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping_IPAddr field of an HTTP POST request.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-03-18  
Published
2017-02-22  
Modified Date
2017-03-01  
Seq
2017-6077  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
407092 82609 CVE-2017-5590 http://openwall.com/lists/oss-security/2017/02/09/29  View
407093 82609 CVE-2017-5590 https://github.com/ChatSecure/ChatSecure-iOS/commit/a340b4bb519227d89f85f2716a10a197a65d4856  View
407094 82609 CVE-2017-5590 https://github.com/zom/Zom-iOS/commit/880051eaa8ba32d1b257c87a7d8798a93561bfd3  View
407095 82609 CVE-2017-5590 https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/  View
407096 82609 CVE-2017-5590 https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf  View
407097 82609 CVE-2017-5590 http://openwall.com/lists/oss-security/2017/02/09/29  View
407098 82609 CVE-2017-5590 https://github.com/ChatSecure/ChatSecure-iOS/commit/a340b4bb519227d89f85f2716a10a197a65d4856  View
407099 82609 CVE-2017-5590 https://github.com/zom/Zom-iOS/commit/880051eaa8ba32d1b257c87a7d8798a93561bfd3  View
407100 82609 CVE-2017-5590 https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/  View
407101 82609 CVE-2017-5590 https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf  View
408225 82609 CVE-2017-2356 95736  View
408226 82609 CVE-2017-2356 https://support.apple.com/HT207481  View
408227 82609 CVE-2017-2356 https://support.apple.com/HT207482  View
408228 82609 CVE-2017-2356 https://support.apple.com/HT207484  View
408229 82609 CVE-2017-2356 https://support.apple.com/HT207485  View
408230 82609 CVE-2017-2356 https://support.apple.com/HT207486  View
408231 82609 CVE-2017-2356 95736  View
408232 82609 CVE-2017-2356 https://support.apple.com/HT207481  View
408233 82609 CVE-2017-2356 https://support.apple.com/HT207482  View
408234 82609 CVE-2017-2356 https://support.apple.com/HT207484  View
408235 82609 CVE-2017-2356 https://support.apple.com/HT207485  View
408236 82609 CVE-2017-2356 https://support.apple.com/HT207486  View
408237 82609 CVE-2017-2356 95736  View
408238 82609 CVE-2017-2356 https://support.apple.com/HT207481  View
408239 82609 CVE-2017-2356 https://support.apple.com/HT207482  View
408240 82609 CVE-2017-2356 https://support.apple.com/HT207484  View
408241 82609 CVE-2017-2356 https://support.apple.com/HT207485  View
408242 82609 CVE-2017-2356 https://support.apple.com/HT207486  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65330 JVNDB-2017-001693 NETGEAR DGN2200 デバイスのファームウェアの ping.cgi における任意の OS コマンドを実行される脆弱性 NETGEAR DGN2200 デバイスのファームウェアの ping.cgi には、任意の OS コマンドを実行される脆弱性が存在します。 CVE-2017-6077 CVE-2017-6077 82609 10 9.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-001693.html 2017-02-18 2017-03-14 View