CVE•Published 2017-03-15•Modified 2026-05-13•1 article on news•6 live references•NVD data

CVE-2017-6366Netgear · Dgn2200_firmware

Vulnerability data via NVD (ingested)

CVSS v3.1

8.8

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS percentile

—

Weaknesses (CWE)

CWE-352Cross-Site Request Forgery (CSRF)

Description

Cross-site request forgery (CSRF) vulnerability in NETGEAR DGN2200 routers with firmware 10.0.0.20 through 10.0.0.50 allows remote attackers to hijack the authentication of users for requests that perform DNS lookups via the host_name parameter to dnslookup.cgi. NOTE: this issue can be combined with CVE-2017-6334 to execute arbitrary code remotely.

Timeline

Published 2017-03-15

Modified 2026-05-13

External references

NVD MITRE Exploit-DB GitHub PoC trickest/cve VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts

vuln:CVE-2017-6366

Hosts Shodan has explicitly fingerprinted as vulnerable.

Shodan · OS

os:"Dgn2200 Firmware"

Hosts Shodan identified as running Dgn2200 Firmware.

More intel sources (5)

Shodan report

vuln:CVE-2017-6366

Country / ASN / product breakdown for the vuln query.

Censys

vulnerabilities.cve_id: CVE-2017-6366