NETGEAR · Wireless Router DGN2200
CVE-2017-6077
NETGEAR DGN2200 Remote Code Execution Vulnerability
CISA KEV record
- CISA date added
- 2022-03-07
- CISA due date
- 2022-09-07
- Known ransomware use
- Unknown
NVD risk context
9.8 CRITICAL
CVSS is a technical severity score. CISA’s KEV status remains the evidence that this vulnerability is known to be exploited.
Description
NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.
Required action
Apply updates per vendor instructions.
NVD reference index
Vendor and remediation references
NVD has not tagged a reference for this KEV as a patch, mitigation, release note, or vendor advisory.
MITRE CWE context
CWE classification
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
View official MITRE CWE details ↗NVD record timing
NVD record timeline
These dates describe NVD’s record, not CISA’s KEV addition or remediation due date.
- NVD published
- Feb 22, 2017, 11:59 PM UTC When NVD first published this CVE record.
- NVD last updated
- Jun 17, 2026, 01:21 AM UTC When NVD last changed its analysis or record data.
Advanced: view the technical CVSS vector
This standardized code is intended for security tools and technical analysts. The plain-language risk summary above explains its main points.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA notes
https://nvd.nist.gov/vuln/detail/CVE-2017-6077