Filtered by vendor Netgear Subscriptions
Filtered by product Dgn2200v1 Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2017-6366 1 Netgear 5 Dgn2200 Firmware, Dgn2200v1, Dgn2200v2 and 2 more 2024-08-05 N/A
Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50 allows remote attackers to hijack the authentication of users for requests that perform DNS lookups via the host_name parameter to dnslookup.cgi. NOTE: this issue can be combined with CVE-2017-6334 to execute arbitrary code remotely.
CVE-2017-6334 1 Netgear 5 Dgn2200 Series Firmware, Dgn2200v1, Dgn2200v2 and 2 more 2024-08-05 8.8 High
dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the host_name field of an HTTP POST request, a different vulnerability than CVE-2017-6077.
CVE-2020-35777 1 Netgear 2 Dgn2200v1, Dgn2200v1 Firmware 2024-08-04 8.4 High
NETGEAR DGN2200v1 devices before v1.0.0.58 are affected by command injection.