NETGEAR DGN2200 Remote Code Execution Vulnerability

The NETGEAR DGN2200 is an ADSL router device. A remote code execution vulnerability in dnslookup.cgi in the NETGEAR DGN2200 version 10.0.0.50 allows remote attackers to execute arbitrary operating system commands via shell metacharacters in the hostname field of an HTTP POST request...

PT-2017-3168 · NetGear · Netgear Dgn2200

Name of the Vulnerable Software and Affected Versions: NETGEAR DGN2200 versions through 10.0.0.50 Description: The issue allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping IPAddr field of an HTTP POST request to the ping.cgi endpoint. This is d...