CVE-2016-11054

HIGH

NETGEAR DGN2200v4 Firmware < 2017-01-06 - OS Command Injection and FTP Insecure Root Directory

Title source: llm

NETGEAR DGN2200v4 devices before 2017-01-06 are affected by command execution and an FTP insecure root directory.

Core 1

Core References

Vendor Advisory x_refsource_confirm

CVSS v3 7.2

EPSS 0.0126

EPSS Percentile 79.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78

Status published

Products (1)

netgear/dgn2200_firmware < 2017-01-06

Published Apr 28, 2020

Tracked Since Feb 18, 2026