CVE-2017-6366

Cross-site request forgery CSRF vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50 allows remote attackers to hijack the authentication of users for requests that perform DNS lookups via the hostname parameter to dnslookup.cgi. NOTE: this issue can be combined with...

CVE-2017-6366

CVE-2017-6366 is a CSRF vulnerability in NETGEAR DGN2200 routers (firmware 10.0.0.20–10.0.0.50) that allows an attacker to hijack a logged-in user’s session for DNS lookup actions via dnslookup.cgi. The entry notes that this can be combined with CVE-2017-6334 to execute arbitrary code remotely. C...