CVE-2016-11054

CWE-78 — OS Command Injection3 documents3 sources
Severity
7.2HIGH
EPSS
1.3%
top 20.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Netgear Dgn2200 Firmware
Timeline
PublishedApr 28
Latest updateMay 24

Description

NETGEAR DGN2200v4 devices before 2017-01-06 are affected by command execution and an FTP insecure root directory.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages1 packages

▶NVDnetgear/dgn2200_firmware< 2017-01-06

🔴Vulnerability Details

2
GHSA
GHSA-jh4q-jpjf-m9ch: NETGEAR DGN2200v4 devices before 2017-01-06 are affected by command execution and an FTP insecure root directory↗2022-05-24
▶
CVEList
CVE-2016-11054: NETGEAR DGN2200v4 devices before 2017-01-06 are affected by command execution and an FTP insecure root directory↗2020-04-28
▶
CVE-2016-11054 (HIGH CVSS 7.2) | NETGEAR DGN2200v4 devices before 20 | cvebase.io