Approved changes feed: RSS · Atom

cpe:2.3:h:netgear:dgn2200:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorNetgear (99700297-c207-56f4-abd0-97ab0c8bf3ab)
ProductDgn2200 (ac79c7ef-8d76-5d4c-ad6d-7de5ad0e7f94)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-57046 not_vulnerable 2026-06-08 06:56:13.355585 Details available
A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authentication. When adding "?x=1.gif" to the the requested url, it will be recognized as passing the authentication.
Published: 2025-02-18T00:00:00.000Z
Updated: 2025-02-19T21:38:37.992Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-20754 not_vulnerable 2026-06-08 05:13:41.465389 Details available
MEDIUM (6.8)
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects DGN2200 before 1.0.0.58, DGN2200B before 1.0.0.58, D8500 before 1.0.3.42, D7000v2 before 1.0.0.51, D6400 before 1.0.0.80, D6220 before 1.0.0.44, EX7000 before 1.0.0.66, EX6200 before 1.0.3.88, EX6150 before 1.0.0.42, EX7500 before 1.0.0.46, JNDR3000 before 1.0.0.24, R8000 before 1.0.4.18, R8500 before 1.0.2.122, R8300 before 1.0.2.122, R7900P before 1.4.0.10, R8000P before 1.4.0.10, R7900 before 1.0.2.16, R7000P before 1.3.1.44, R7300DST before 1.0.0.68, R7100LG before 1.0.0.46, R6900P before 1.3.1.44, R7000 before 1.0.9.32, R6900 before 1.0.1.46, R6700 before 1.0.1.46, R6400v2 before 1.0.2.56, R6400 before 1.0.1.42, R6300v2 before 1.0.4.28, R6250 before 1.0.4.26, WNDR4500v2 before 1.0.0.72, and WNR3500Lv2 before 1.2.0.54.
Published: 2020-04-16T21:07:26.000Z
Updated: 2024-08-05T02:53:09.110Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17373 not_vulnerable 2026-06-08 05:13:10.426995 Details available
Certain NETGEAR devices allow unauthenticated access to critical .cgi and .htm pages via a substring ending with .jpg, such as by appending ?x=1.jpg to a URL. This affects MBR1515, MBR1516, DGN2200, DGN2200M, DGND3700, WNR2000v2, WNDR3300, WNDR3400, WNR3500, and WNR834Bv2.
Published: 2019-10-09T12:07:13.000Z
Updated: 2024-08-05T01:40:15.309Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6077 not_vulnerable 2026-06-08 05:09:50.492349 Details available
ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping_IPAddr field of an HTTP POST request.
Published: 2017-02-22T23:00:00.000Z
Updated: 2025-10-21T23:55:46.583Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5649 not_vulnerable 2026-06-08 05:07:57.396687 Netgear DGN2200 and DGND3700 disclose the administrator password
A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a remote attacker to access this page without any authentication. When processed, it exposes the admin password in clear text before it gets redirected to absw_vfysucc.cgia. An attacker can use this password to gain administrator access to the targeted router's web interface.
Published: 2018-07-24T15:00:00.000Z
Updated: 2024-08-06T01:08:00.436Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.